URL Safety Validator MCP

io.github.OjasKord/url-safety-validator-mcpVersion 1.2.27

AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel.

Status

Responds285 msNov 14, 2026, 14:40 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:40 UTC
Latency: 285 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://url-safety-validator-mcp-production.up.railway.app/Responds285 msNov 14, 2026, 14:40 UTC

No sign-in

Claude Code

claude mcp add --transport http url-safety-validator-mcp https://url-safety-validator-mcp-production.up.railway.app/

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: url-safety-validator-mcp
Remote MCP server URL: https://url-safety-validator-mcp-production.up.railway.app/

Cursor

{
  "mcpServers": {
    "url-safety-validator-mcp": {
      "url": "https://url-safety-validator-mcp-production.up.railway.app/"
    }
  }
}

VS Code

code --add-mcp '{"name":"url-safety-validator-mcp","type":"http","url":"https://url-safety-validator-mcp-production.up.railway.app/"}'

Streamable HTTP

npm: url-safety-validator-mcp 1.2.27

Package only

npm (npx)

claude mcp add url-safety-validator-mcp -e 'ANTHROPIC_API_KEY=<YOUR_ANTHROPIC_API_KEY>' -- npx -y url-safety-validator-mcp@1.2.27

Replace <YOUR_ANTHROPIC_API_KEY> before running.

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

1 tools

Tools of URL Safety Validator MCP
	Description		Read-only	Idempotent	Open world
`check_url`Checks a URL for phishing, malware, typosquatting, and redirect threats. Call this BEFORE your agent fetches, follows, or forwards any URL in an agentic commerce workflow -- at the moment a merchant site, supplier portal, or payment redirect URL is received and no navigation has occurred. Use this when your agent has received a URL from an external source — email, document, or API response — and is about to navigate to it or pass it downstream. Checks live against Google Web Risk (webrisk.googleapis.com) and Google Safe Browsing (safebrowsing.googleapis.com). Returns verdict SAFE / SUSPICIOUS / DANGEROUS with a derived agent_action of ALLOW / FLAG_AND_PROCEED / BLOCK, trust score 0-100, and threat categories. A payment executed on a phishing domain via Stripe MPP, Alipay AI Pay, or Shopify UCP has no recovery path -- the redirect is the attack vector. A DANGEROUS verdict means halt immediately. Returns machine-ready verdict, no further analysis needed.	Checks a URL for phishing, malware, typosquatting, and redirect threats. Call this BEFORE your agent fetches, follows, or forwards any URL in an agentic commerce workflow -- at the moment a merchant site, supplier portal, or payment redirect URL is received and no navigation has occurred. Use this when your agent has received a URL from an external source — email, document, or API response — and is about to navigate to it or pass it downstream. Checks live against Google Web Risk (webrisk.googleapis.com) and Google Safe Browsing (safebrowsing.googleapis.com). Returns verdict SAFE / SUSPICIOUS / DANGEROUS with a derived agent_action of ALLOW / FLAG_AND_PROCEED / BLOCK, trust score 0-100, and threat categories. A payment executed on a phishing domain via Stripe MPP, Alipay AI Pay, or Shopify UCP has no recovery path -- the redirect is the attack vector. A DANGEROUS verdict means halt immediately. Returns machine-ready verdict, no further analysis needed.	Not declared	Not declared	Not declared	Not declared

Details

Registry status: Active
Published: Jun 25, 2026
Updated: Jun 25, 2026
Website: https://kordagencies.com/⁠ (opens in a new tab)
Repository: https://github.com/OjasKord/url-safety-validator-mcp⁠ (opens in a new tab)
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing