desenmascara.me
Is this website a scam? Dated, sourced fraud assessments of domains. Free, read-only, no key.
Should I use this
Quality & Safety
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"desenmascara": {
"url": "https://desenmascara.me/mcp/v1"
}
}
}Remote endpoints
https://desenmascara.me/mcp/v1streamable-httpWhat it can do
Tool inventory
Tools (2)
🟢get_domain_report(domain, language)
Return desenmascara.me's existing assessment of a domain: the verdict, when it was reached, the recorded findings and a link to the published report. Reads stored data only — it starts no new analysis. A domain with no report returns status 'not_found', which says nothing about the site. desenmascara.me assesses whether a website domain is fraudulent, using evidence gathered at a point in time. It can and does decline to judge when the evidence is insufficient. It assesses domains, not URLs, and its assessment does not establish that a particular payment or action is safe.
Input Schema
{
"type": "object",
"properties": {
"domain": {
"description": "A hostname such as example.com or shop.example.com. Not a URL: paths and query strings are not assessed. Subdomains are significant and are not collapsed to the parent domain.",
"maxLength": 253,
"minLength": 3,
"title": "Domain",
"type": "string"
},
"language": {
"default": "en",
"description": "Language for the explanation and findings.",
"enum": [
"en",
"es"
],
"title": "Language",
"type": "string"
}
},
"required": [
"domain"
],
"title": "get_domain_reportArguments"
}🟢check_before_payment(domain)
For an AI agent about to pay, or to submit card or account details, on a website: returns one action — 'do_not_pay', 'stop_and_ask_user' or 'no_fraud_found' — with the reason and the report link. 'do_not_pay' means the domain is published as fraudulent with evidence, or hides instructions aimed at AI agents. Anything not settled, including a domain never assessed, is 'stop_and_ask_user': hand the decision back to the person, never proceed on your own. 'no_fraud_found' is not a guarantee. Call it with the merchant's domain, not a payment page URL. desenmascara.me assesses whether a website domain is fraudulent, using evidence gathered at a point in time. It can and does decline to judge when the evidence is insufficient. It assesses domains, not URLs, and its assessment does not establish that a particular payment or action is safe.
Input Schema
{
"type": "object",
"properties": {
"domain": {
"description": "The merchant's hostname, such as shop.example.com.",
"maxLength": 253,
"minLength": 3,
"title": "Domain",
"type": "string"
}
},
"required": [
"domain"
],
"title": "check_before_paymentArguments"
}Community
Evidence