scamverifyai/scamverify-mcp

AI-powered scam and threat verification MCP server. Verify phone numbers, URLs, text messages, emails, documents, and QR codes against 10M+ threat intelligence records from FTC, FCC, URLhaus, ThreatFox, and community reports.
**Server URL:** https://scamverify.ai/api/mcp
**Transport:** Streamable HTTP (stateless) or stdio (local proxy)
**Authentication:** API key or OAuth 2.1 (PKCE)
Tools (10)
| Tool | Description |
|------|-------------|
| check_phone | Look up a US phone number for scam reports, carrier info, robocall flags, and community reports. Returns risk score (0-100), verdict, and detailed signals from FTC, FCC, carrier, and community data. |
| check_url | Check a website URL for safety. Analyzes domain age, SSL certificate, redirect chains, brand impersonation, Google Web Risk, URLhaus, ThreatFox, and community reports. |
| check_text | Analyze a text/SMS message for scam indicators. Extracts and cross-references embedded phone numbers and URLs. AI identifies scam type, red flags, and risk level. |
| check_email | Analyze an email for phishing indicators. Checks sender domain, email headers (SPF/DKIM/DMARC), brand impersonation, embedded URLs and phone numbers. |
| check_document | Analyze a document image for scam indicators. Uses vision AI to extract entities (addresses, officials, citations, phone numbers) and verifies them against government databases. |
| check_qr | Scan a QR code image and verify its contents. Decodes the QR code server-side and, if it contains a URL, runs full URL verification. |
| batch_phone | Look up multiple phone numbers in a single request (max 100). |
| batch_url | Check multiple URLs in a single request (max 100). |
| get_usage | Check your current API usage quota and rate limits for the billing period. |
| get_status | Check the operational status of ScamVerify API services. No authentication required. |
Prompts (4)
| Prompt | Description |
|--------|-------------|
| investigate_phone | Investigate a suspicious phone number for scam indicators and provide a safety recommendation. |
| verify_url | Check if a website URL is safe to visit and provide a detailed safety assessment. |
| analyze_text | Analyze a suspicious text message for scam indicators and explain the findings. |
| check_email | Analyze a suspicious email for phishing indicators and provide a safety assessment. |
Data Sources
- **FTC Do Not Call Complaints** - 9.7M+ records with scam type classification
- **FCC Consumer Complaints** - 443K+ telecom violation reports
- **URLhaus** - 74K+ active malicious URL indicators
- **ThreatFox** - 60K+ IOCs (indicators of compromise)
- **Carrier Intelligence** - Line type, CNAM, VoIP detection, high-risk carrier flagging
- **Community Reports** - User-submitted scam reports with verification
Setup
Option 1: Remote Server (Recommended)
Connect directly to the hosted ScamVerify MCP server. No installation required.
**Claude Desktop:**
**Claude Desktop (OAuth - no API key needed):**
When using without an API key, Claude Desktop will initiate the OAuth 2.1 flow. You'll be redirected to sign in at scamverify.ai and authorize access.