Scamverify MCP
Scam and threat checks for phone numbers, URLs, texts, emails, documents and QR codes using FTC/FCC complaints, URLhaus and ThreatFox, with risk scores.
التثبيت
خطوات التثبيت موجودة في التوثيق أدناه. التوثيق
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
ScamVerify MCP Server
AI-powered scam and threat verification MCP server. Verify phone numbers, URLs, text messages, emails, documents, and QR codes against 10M+ threat intelligence records from FTC, FCC, URLhaus, ThreatFox, and community reports.
Server URL: https://scamverify.ai/api/mcp
Transport: Streamable HTTP (stateless) or stdio (local proxy)
Authentication: API key or OAuth 2.1 (PKCE)
Tools (10)
| Tool | Description |
|---|---|
check_phone | Look up a US phone number for scam reports, carrier info, robocall flags, and community reports. Returns risk score (0-100), verdict, and detailed signals from FTC, FCC, carrier, and community data. |
check_url | Check a website URL for safety. Analyzes domain age, SSL certificate, redirect chains, brand impersonation, Google Web Risk, URLhaus, ThreatFox, and community reports. |
check_text | Analyze a text/SMS message for scam indicators. Extracts and cross-references embedded phone numbers and URLs. AI identifies scam type, red flags, and risk level. |
check_email | Analyze an email for phishing indicators. Checks sender domain, email headers (SPF/DKIM/DMARC), brand impersonation, embedded URLs and phone numbers. |
check_document | Analyze a document image for scam indicators. Uses vision AI to extract entities (addresses, officials, citations, phone numbers) and verifies them against government databases. |
check_qr | Scan a QR code image and verify its contents. Decodes the QR code server-side and, if it contains a URL, runs full URL verification. |
batch_phone | Look up multiple phone numbers in a single request (max 100). |
batch_url | Check multiple URLs in a single request (max 100). |
get_usage | Check your current API usage quota and rate limits for the billing period. |
get_status | Check the operational status of ScamVerify API services. No authentication required. |
Prompts (4)
| Prompt | Description |
|---|---|
investigate_phone | Investigate a suspicious phone number for scam indicators and provide a safety recommendation. |
verify_url | Check if a website URL is safe to visit and provide a detailed safety assessment. |
analyze_text | Analyze a suspicious text message for scam indicators and explain the findings. |
check_email | Analyze a suspicious email for phishing indicators and provide a safety assessment. |
Data Sources
- FTC Do Not Call Complaints - 9.7M+ records with scam type classification
- FCC Consumer Complaints - 443K+ telecom violation reports
- URLhaus - 74K+ active malicious URL indicators
- ThreatFox - 60K+ IOCs (indicators of compromise)
- Carrier Intelligence - Line type, CNAM, VoIP detection, high-risk carrier flagging
- Community Reports - User-submitted scam reports with verification
Setup
Option 1: Remote Server (Recommended)
Connect directly to the hosted ScamVerify MCP server. No installation required.
Claude Desktop:
{
"mcpServers": {
"scamverify": {
"type": "streamable-http",
"url": "https://scamverify.ai/api/mcp",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
}
}
Claude Desktop (OAuth - no API key needed):
{
"mcpServers": {
"scamverify": {
"type": "streamable-http",
"url": "https://scamverify.ai/api/mcp"
}
}
}
When using without an API key, Claude Desktop will initiate the OAuth 2.1 flow. You'll be redirected to sign in at scamverify.ai and authorize access.
Cursor / Windsurf / Other MCP Clients:
{
"type": "streamable-http",
"url": "https://scamverify.ai/api/mcp",
"headers": {
"Authorization": "Bearer YOUR_API_KEY"
}
}
ChatGPT:
ScamVerify is available as a ChatGPT connector. Add it through the ChatGPT plugin/connector settings using:
- MCP URL:
https://scamverify.ai/api/mcp - Auth: OAuth
Option 2: Local Proxy (stdio)
Run a local MCP server that proxies all tool calls to the ScamVerify API. Useful for MCP clients that only support stdio transport.
Install and run:
npm install -g @scamverifyai/scamverify-mcp
SCAMVERIFY_API_KEY=sv_live_... scamverify-mcp
Or run directly with npx:
SCAMVERIFY_API_KEY=sv_live_... npx @scamverifyai/scamverify-mcp
Claude Desktop (stdio):
{
"mcpServers": {
"scamverify": {
"command": "npx",
"args": ["@scamverifyai/scamverify-mcp"],
"env": {
"SCAMVERIFY_API_KEY": "sv_live_..."
}
}
}
}
Docker:
docker build -t scamverify-mcp .
docker run -e SCAMVERIFY_API_KEY=sv_live_... scamverify-mcp
Environment Variables
| Variable | Required | Description |
|---|---|---|
SCAMVERIFY_API_KEY | Yes | Your API key (prefix: sv_live_ for production, sv_test_ for testing) |
SCAMVERIFY_API_URL | No | Override the API base URL (default: https://scamverify.ai) |
Getting an API Key
- Sign up at scamverify.ai
- Go to Settings > API Keys
- Generate a key (prefix:
sv_live_for production,sv_test_for testing)
OAuth 2.1 Authentication
The remote server supports OAuth 2.1 with PKCE (S256). Discovery endpoints:
- Authorization Server:
https://scamverify.ai/.well-known/oauth-authorization-server - Protected Resource:
https://scamverify.ai/.well-known/oauth-protected-resource
OAuth scopes: phone:lookup, url:lookup, text:analyze, email:analyze, usage:read
Development
git clone https://github.com/scamverifyai/scamverify-mcp.git
cd scamverify-mcp
npm install
npm run build
SCAMVERIFY_API_KEY=sv_test_... npm start
Pricing
A free tier (50 lookups/month) is automatically provisioned on first OAuth login or API key creation.
| Plan | Monthly Price | Lookups/mo | Rate Limit |
|---|---|---|---|
| Free | $0 | 50 | 10 RPM |
| Starter | $19/mo | 1,000 | 30 RPM |
| Growth | $49/mo | 5,000 | 60 RPM |
| Pro | $149/mo | 25,000 | 120 RPM |
| Scale | $499/mo | 100,000 | 300 RPM |
| Enterprise | Custom | Custom | Custom |
Full API documentation: docs.scamverify.ai
Links
- Website: scamverify.ai
- API Docs: docs.scamverify.ai
- MCP Integration Guide: docs.scamverify.ai/docs/guides/mcp-integration
- OAuth Flow Guide: docs.scamverify.ai/docs/guides/oauth-flow
- Status Page: status.scamverify.ai
- Contact: scamverify.ai/contact
License
MIT
الأسئلة الشائعة
ما هو Scamverify MCP؟
Scam and threat checks for phone numbers, URLs, texts, emails, documents and QR codes using FTC/FCC complaints, URLhaus and ThreatFox, with risk scores.
كيف أثبّت Scamverify MCP؟
اتبع خطوات التثبيت في توثيقه المعروض في هذه الصفحة وفي مستودعه.
هل Scamverify MCP مفتوح المصدر؟
نعم. شيفرته متاحة على GitHub بترخيص MIT.
من يصون Scamverify MCP؟
ينشره scamverifyai. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من القوائم المجتمعية awesome-mcp-servers ومستودع المشروع على GitHub. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.