MCP 서버

URL Safety Validator MCP

io.github.OjasKord/url-safety-validator-mcp
보안 공개 · 연결 가능 MCP 2026-07-28

이 MCP로 할 수 있는 일

Checks URLs for phishing, malware, typosquatting, and redirect threats and returns a safety verdict and trust score.

check_url
Checks a URL for phishing, malware, typosquatting, and redirect threats. Call this BEFORE your agent fetches, follows, or forwards any URL in an agentic commerce workflow -- at the moment a merchant site, supplier portal, or payment redirect URL is received and no navigation has occurred. Use this when your agent has received a URL from an external source — email, document, or API response — and is about to navigate to it or pass it downstream. Checks live against Google Web Risk (webrisk.googleapis.com) and Google Safe Browsing (safebrowsing.googleapis.com). Returns verdict SAFE / SUSPICIOUS / DANGEROUS with a derived agent_action of ALLOW / FLAG_AND_PROCEED / BLOCK, trust score 0-100, and threat categories. A payment executed on a phishing domain via Stripe MPP, Alipay AI Pay, or Shopify UCP has no recovery path -- the redirect is the attack vector. A DANGEROUS verdict means halt immediately. Returns machine-ready verdict, no further analysis needed.
입력 스키마
{'type': 'object', 'required': ['url'], 'properties': {'url': {'type': 'string', 'description': 'The URL to check. Full URL preferred (e.g. https://example.com/path). Bare domains also accepted.'}}}
출력 스키마
{'type': 'object', 'required': ['url', 'hostname', 'verdict', 'agent_action', 'trust_score', 'checked_at', '_disclaimer'], 'properties': {'url': {'type': 'string'}, 'verdict': {'enum': ['SAFE', 'SUSPICIOUS', 'DANGEROUS'], 'type': 'string'}, 'hostname': {'type': 'string'}, 'reasoning': {'type': 'string'}, 'ssl_valid': {'type': 'boolean'}, 'checked_at': {'type': 'string', 'format': 'date-time'}, 'source_url': {'type': 'string'}, '_disclaimer': {'type': 'string'}, 'hold_reason': {'type': 'string', 'description': 'Present only when verdict is SUSPICIOUS'}, 'retry_after': {'type': ['number', 'null']}, 'trust_score': {'type': 'number', 'maximum': 100, 'minimum': 0}, 'agent_action': {'enum': ['ALLOW', 'FLAG_AND_PROCEED', 'BLOCK'], 'type': 'string', 'description': 'Derived directly from verdict'}, 'ai_confidence': {'type': ['string', 'null']}, 'analysis_type': {'type': 'string'}, 'domain_age_days': {'type': ['number', 'null']}, 'escalation_path': {'type': 'string', 'description': 'Present only when verdict is SUSPICIOUS'}, 'database_signals': {'type': 'object'}, 'domain_registered': {'type': ['string', 'null']}, 'threat_categories': {'type': 'array', 'items': {'type': 'string'}}, 'redirect_chain_detected': {'type': 'boolean'}}, 'additionalProperties': True}
추가됨
check_url
2026년 9월 17일 12:45 PM