Unphurl
Score and inspect URLs for phishing and risk signals inside your agent before users click links in your product or docs.
Overview
Unphurl MCP is a MCP server for the Ship phase that delivers URL intelligence across sixteen tools with twenty-five weighted signals for agent-driven link risk checks.
What is this MCP server?
- 16 MCP URL intelligence tools with 25 weighted risk signals
- 20 free checks tier documented in server description
- Remote https://mcp.unphurl.com/mcp plus npm @unphurl/mcp-server stdio
- UNPHURL_API_KEY required for stdio npm package
- Purpose-built for AI agents and developers analyzing link safety
- 16 MCP tools
- 25 signal weights
- 20 free checks (per server description)
What problem does it solve?
User-submitted and third-party URLs slip into apps and docs without consistent phishing checks during fast indie shipping cycles.
Who is it for?
Indie devs adding link validation to agents, support bots, CMS pipelines, or pre-launch security spot checks.
Skip if: Full application penetration tests, email gateway replacement, or teams that only need DNS WHOIS without phishing scoring.
What do I get? / Deliverables
Your agent returns weighted URL risk assessments so you can block, flag, or review links before release or in production support flows.
- Per-URL intelligence reports with weighted risk signals via sixteen tools
- Repeatable agent workflows for link approval or quarantine before ship
Recommended MCP Servers
Journey fit
How it compares
URL phishing-intelligence MCP with signal weighting, not a federal data or company-news research server.
Common Questions / FAQ
Who is Unphurl MCP for?
It is for developers and agent builders who need automated URL scoring and phishing signals inside Claude Code, Cursor, or other MCP clients.
When should I use Unphurl MCP?
Use it in Ship security when validating user links, webhook targets, or documentation URLs before launch or during incident triage.
How do I add Unphurl MCP to my agent?
Connect to https://mcp.unphurl.com/mcp remotely or install @unphurl/mcp-server via npm, set UNPHURL_API_KEY, and register stdio or HTTP MCP in your host.