URL Safety Validator MCP

Checks a URL for phishing, malware, typosquatting, and redirect threats. Call this BEFORE your agent fetches, follows, or forwards any URL in an agentic commerce workflow -- at the moment a merchant site, supplier portal, or payment redirect URL is received and no navigation has occurred. Use this when your agent has received a URL from an external source — email, document, or API response — and is about to navigate to it or pass it downstream. Checks live against Google Web Risk (webrisk.googleapis.com) and Google Safe Browsing (safebrowsing.googleapis.com). Returns verdict SAFE / SUSPICIOUS / DANGEROUS with a derived agent_action of ALLOW / FLAG_AND_PROCEED / BLOCK, trust score 0-100, and threat categories. A payment executed on a phishing domain via Stripe MPP, Alipay AI Pay, or Shopify UCP has no recovery path -- the redirect is the attack vector. A DANGEROUS verdict means halt immediately. Returns machine-ready verdict, no further analysis needed.

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "The URL to check. Full URL preferred (e.g. https://example.com/path). Bare domains also accepted."
    }
  },
  "required": [
    "url"
  ]
}

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string"
    },
    "hostname": {
      "type": "string"
    },
    "verdict": {
      "type": "string",
      "enum": [
        "SAFE",
        "SUSPICIOUS",
        "DANGEROUS"
      ]
    },
    "agent_action": {
      "type": "string",
      "enum": [
        "ALLOW",
        "FLAG_AND_PROCEED",
        "BLOCK"
      ],
      "description": "Derived directly from verdict"
    },
    "trust_score": {
      "type": "number",
      "minimum": 0,
      "maximum": 100
    },
    "ssl_valid": {
      "type": "boolean"
    },
    "domain_age_days": {
      "type": [
        "number",
        "null"
      ]
    },
    "domain_registered": {
      "type": [
        "string",
        "null"
      ]
    },
    "redirect_chain_detected": {
      "type": "boolean"
    },
    "threat_categories": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "reasoning": {
      "type": "string"
    },
    "ai_confidence": {
      "type": [
        "string",
        "null"
      ]
    },
    "analysis_type": {
      "type": "string"
    },
    "database_signals": {
      "type": "object"
    },
    "checked_at": {
      "type": "string",
      "format": "date-time"
    },
    "source_url": {
      "type": "string"
    },
    "hold_reason": {
      "type": "string",
      "description": "Present only when verdict is SUSPICIOUS"
    },
    "retry_after": {
      "type": [
        "number",
        "null"
      ]
    },
    "escalation_path": {
      "type": "string",
      "description": "Present only when verdict is SUSPICIOUS"
    },
    "_disclaimer": {
      "type": "string"
    }
  },
  "required": [
    "url",
    "hostname",
    "verdict",
    "agent_action",
    "trust_score",
    "checked_at",
    "_disclaimer"
  ],
  "additionalProperties": true
}