URL safety check, scam signals: domain age, redirects and HTTPS
Check a link before an agent opens or pays it: where it really leads (each redirect hop, the final URL), the destination domain's age, registrar and trust flags, HTTPS and security headers, and named risk signals (days-old domain, bare IP host, punycode look-alike, user@host trick, chains across many hosts). Heuristic signals from public facts, not a phishing blocklist. Use to vet links in emails, chats and scraped pages, or a payee's website.
Inputs
| Name | Type | Description |
|---|---|---|
url (required) | string | The link to check (http or https) |
Request
Over HTTP, with a card key from /credits:
curl -H "Authorization: Bearer adt_…" "https://agent-data-tools.revmesh2074.workers.dev/pack/url-safety?url=http%3A%2F%2Fgithub.com"
Or one of your 25 free calls, no key:
curl "https://agent-data-tools.revmesh2074.workers.dev/pack/url-safety?url=http%3A%2F%2Fgithub.com&trial=1"
Without a key, the same URL answers 402 Payment Required with x402 and MPP terms, so an agent with a wallet pays per call in USDC (Base, Polygon, Arbitrum or Solana over x402; Base or Tempo over MPP) and retries.
Example result
{
"pack": "url-safety",
"url": "http://github.com/",
"finalUrl": "https://github.com/",
"risk": "low",
"signals": [],
"redirects": {
"count": 1,
"hosts": [
"github.com"
],
"hops": [
{
"url": "http://github.com/",
"status": 301
}
]
},
"domain": {
"domain": "github.com",
"trust": "high",
"ageDays": 6600,
"registrar": "MarkMonitor Inc."
},
"security": {
"https": true,
"score": 80,
"grade": "B"
},
"failed": {}
}
From an AI agent (MCP)
Add the MCP server to Claude, Cursor or any MCP client. This tool is pack_url_safety, and the first 25 successful calls are free:
https://agent-data-tools.revmesh2074.workers.dev/mcp