protogrid

Search / io.github.smijo-geek/scamcheck-mcp-server

scamcheck-mcp-server

R0· no sign-in

Scan suspicious messages, URLs, and text for scams with AI. Free tier - no API key required.

v1.1.2 · active · repository · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality87good
Trust87of 100
Uptime, 30 days100%
Latency p50286 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "scamcheck-mcp-server": {
      "type": "http",
      "url": "https://scamcheck.tech/api/mcp"
    }
  }
}
claude mcp add --transport http scamcheck-mcp-server https://scamcheck.tech/api/mcp
[mcp_servers.scamcheck-mcp-server]
url = "https://scamcheck.tech/api/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "scamcheck-mcp-server": {
      "type": "remote",
      "url": "https://scamcheck.tech/api/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "scamcheck-mcp-server": {
      "type": "http",
      "url": "https://scamcheck.tech/api/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=scamcheck-mcp-server&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vc2NhbWNoZWNrLnRlY2gvYXBpL21jcCJ9"
}
{
  "servers": {
    "scamcheck-mcp-server": {
      "type": "http",
      "url": "https://scamcheck.tech/api/mcp"
    }
  }
}
{
  "mcpServers": {
    "scamcheck-mcp-server": {
      "httpUrl": "https://scamcheck.tech/api/mcp"
    }
  }
}
extensions:
  "scamcheck-mcp-server":
    enabled: true
    name: "scamcheck-mcp-server"
    type: streamable_http
    uri: "https://scamcheck.tech/api/mcp"
    timeout: 300

Quality 87 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations1 of 1 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 189 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependencies67 · weight 15
  • pass
    deps.known_vulnsno known advisory in 98 resolved packages
  • fail
    deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
  • pass
    deps.resolvable[email protected] resolved: 98 packages

1 tools, about 189 tokens to load them all · tool set b355f983539d · checked 2026-10-19 15:15 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 87 / 100

provenance80
liveness100
freshness65
hygiene100

+repository +namespace-matches-repo +reachable +uptime-100% ~updated-103d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisoryseveritypackagefixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverhigh@modelcontextprotocol/[email protected]MCP SDK, directfixed in 1.31.0

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://scamcheck.tech/api/mcp streamable-httpnoneyes100%286 ms2025-11-252026-10-19
packageregistryversionruntimesecrets
scamcheck-mcp-servernpm1.1.2–SCAMCHECK_API_KEY

Tools (1)

scan_messageread-onlyScan a suspicious message, URL, or text for scam indicators using ScamCheck AI. Returns a verdict (Likely Scam / Suspicious / Likely Safe), risk score 0-100, category, confidence percentage, reasons flagged, and recommended actions. Use this whenever a user shares a message they received and wants to know if it's a scam.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "io.github.smijo-geek/scamcheck-mcp-server",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "remotes": [
    {
      "url": "https://scamcheck.tech/api/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.1.2",
  "packages": [
    {
      "version": "1.1.2",
      "transport": {
        "type": "stdio"
      },
      "identifier": "scamcheck-mcp-server",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "SCAMCHECK_API_KEY",
          "isSecret": true,
          "description": "Optional API key for higher limits (free anonymous tier works without it)"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/smijo-geek/scamcheck-mcp-server",
    "source": "github"
  },
  "description": "Scan suspicious messages, URLs, and text for scams with AI. Free tier - no API key required."
}