Bonafido: Business Domain Verification API

dev.workers.cybermax-tools.cybermaxPublished by cybermax.cybermax-tools.workers.devv1.0.2Updated Oct 24, 2026

Bonafido: is a domain a real business site? Verdict, trust score, risk flags.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Lets an assistant check whether a domain looks like a real business site, returning a verdict, trust score, and risk flags.

What you can do
Bonafido is a remote verification API exposed as an MCP server. Given a domain, it reports whether the site appears to be a genuine business, along with a verdict, a trust score, and risk flags. It is a read-only lookup service; no tools are listed in the manifest beyond this verification capability.
When to use it
Useful when an assistant needs to screen a domain or website before trusting it, for example during vendor checks, lead qualification, fraud screening, or research where site legitimacy matters.
Requirements
A remote streamable HTTP endpoint at bonafido.cybermaxtools.com; no local runtime or package is needed. An optional paid-plan API key is supplied in the x-api-key header; without it the free daily tier applies. Network access to the endpoint is required.
Before you install
The x-api-key header carries a paid-plan credential and should be kept secret. The free tier is rate-limited daily, so heavy use may need a paid plan. Domains queried are sent to a third-party service, so avoid submitting sensitive or internal hostnames.

Installation

In SourceWeft

  1. Open Bonafido: Business Domain Verification API in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/dev.workers.cybermax-tools.cybermax%2Fbonafido/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "bonafido-business-domain-verification-ap": {
      "type": "http",
      "url": "https://bonafido.cybermaxtools.com/mcp?via=mcp-registry"
    }
  }
}

Tools

0
SourceWeft has not read this server's tools yet.

Version history

2
  1. v1.0.2LatestOct 10, 2026
  2. v1.0.1Oct 10, 2026

Score

60% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.