url-oracle — URL Trust Oracle MCP Server

by julian-martin89 Your server? Claim it

answering

url-oracle — URL Trust Oracle is answering right now. Last checked 10 min ago. It exposes 1 tools.

Flags phantom-squatted/typosquatted domains and known-malicious URLs before an agent follows them.

Uptime history 15 days of history · worst day 99%

15 days agonow

98.9%

Uptime 24h

91 of 92 checks

Tools

read from the server

181 ms

Response time

average over 24h

open, no key

Access

streamable-http

url-oracle — URL Trust Oracle missed one check this week

Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add url-oracle --transport http https://url-oracle.fly.dev/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "url-oracle": {
      "url": "https://url-oracle.fly.dev/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.url-oracle]
url = "https://url-oracle.fly.dev/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "url-oracle": {
      "url": "https://url-oracle.fly.dev/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "url-oracle": {
      "url": "https://url-oracle.fly.dev/mcp"
    }
  }
}

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

verify

verify_url

URL Trust Oracle. Call this BEFORE fetching, citing, recommending, or following any URL you were not given directly by the user (one you generated, recalled, or inferred). LLMs routinely hallucinate plausible-looking URLs for documentation, APIs, and brands — attackers pre-register those exact domains and serve phishing/malware to whoever follows them ('phantom squatting'). This tool checks the domain's RDAP registration (does it exist, how old is it), runs a Levenshtein-distance brand-similarity check against well-known domains, and checks the exact URL against a known-malicious-infrastructure blocklist. Returns a synthetic verdict: ALLOW (no issues found), WARN (proceed with caution — read the findings), or BLOCK (do not fetch or cite this — likely a hallucinated/squatted domain or confirmed malicious URL). First 5 calls per caller are free; after that this tool requires x402 payment (USDC on Base) and will return a payment-required error with the amount and address to pay.

Endpoints

URL	Transport	State	Latency	Checked
https://url-oracle.fly.dev/mcp	streamable-http	answering	213 ms	10 min ago

Alternatives to url-oracle — URL Trust Oracle

same job, measured the same way

pkg-oracle — Dependency Trust Oracle

by julian-martin89

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

1 tools answering

PayCheck

by toolweather

Score merchant domain, https URL, or 0x wallet trust before an agent pays. Does not send payments.

3 tools answering

Agentsafe

by andyscott88

Real-time URL trust scoring for AI agents. Blocks phishing and malicious sites.

34 installs/wk local only

SECONDED

by secondedoracle

The oracle for agents. Verify trades, tokens and messages before your agent acts.

local only

SECONDED

by secondedoracle

The oracle for agents. Verify trades, tokens and messages before your agent acts.

local only

Pkgtruth

by hxckya

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

61 installs/wk local only

Databutler Provenance

by physics-star-cat

Live trust signals for domains & packages: age, registrar, typosquat resemblance.

2 tools answering

Faro

by vedux98

Verify URLs, payees, and messages before acting: red/yellow/green trust verdicts for agents.

answering

url-oracle — URL Trust Oracle — questions

Answers built from our own checks of this server.

What can url-oracle — URL Trust Oracle do?

It exposes 1 tools, read directly from the server on our last check. Among them: verify_url. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is url-oracle — URL Trust Oracle working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 92 checks got a reply (98.9%), average response time 181 ms. The bar chart above shows every period we have measured.

How do I connect url-oracle — URL Trust Oracle?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does url-oracle — URL Trust Oracle need an API key?

No. url-oracle — URL Trust Oracle completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is url-oracle — URL Trust Oracle?

It answers our handshake in 181 ms on average, which is faster than 66% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.