verified.fyi

fyi.verifiedPublished by verified.fyiOfficial publisherv1.0.0Updated Nov 1, 2026

Check whether a website is trustworthy: trust score, verdict, red flags and a citable report.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that lets an assistant look up verified.fyi trust reports for websites, with a 0-100 score, verdict and summary.

What you can do
  • Look up a website's trust report: 0-100 score, verdict, plain-English summary and a link to the full report
  • Trigger an on-demand scan when a domain has never been checked
  • List verified.fyi's published research stories with headline statistics, dates and dataset links
  • Return citation metadata (report URL and attribution line) with every result
When to use it
Useful when an assistant needs a quick risk signal before visiting, recommending, linking to or transacting with an unfamiliar website, or when you want citable trust data and research for a domain.
Requirements
A remote streamable HTTP endpoint at verified.fyi; no package, API key, environment variable or header is declared. Network access to verified.fyi is required.
Before you install
Scores are a risk guide, not a guarantee. Checking a domain may trigger an on-demand scan of that site. Reuse of the data requires credit to verified.fyi and a link to the report page. Backend hostnames of established companies are not scored and return a Service endpoint verdict instead.

Installation

In SourceWeft

  1. Open verified.fyi in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/fyi.verified%2Ftrust-reports/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "verified-fyi": {
      "type": "http",
      "url": "https://verified.fyi/mcp"
    }
  }
}

Tools

2

check_website

Check website trust

Look up verified.fyi's independent trust report for a website: a 0-100 trust score, a verdict and a plain-English summary, drawn from automated checks (domain age, TLS, DNS, Google Web Risk, VirusTotal, blocklists, reviews, archive history, page content), with a link to the full report that lists every check. Use it before visiting, buying from, signing up to, or entering personal or payment details on an unfamiliar site, or when someone asks whether a site, online shop, link or sender's domain is legitimate, safe or a scam. Accepts a bare domain or any URL. Known sites return instantly. A site never checked before is scanned on demand, which usually takes 20-60 seconds; if the scan isn't finished within about 25 seconds the result has status "generating" and retry_after_seconds.

Parametersurl_or_domainrequired

list_research

List verified.fyi research

List verified.fyi's published research: original data stories built from its dataset of website trust reports, such as how a domain's age relates to scam risk. Each entry has the headline statistic, a short description, the publication date, and links to the story and its JSON dataset. Useful when someone asks for statistics or trends about scam, phishing or fraudulent websites, or wants citable data on online safety.

Takes no parameters.

Version history

1
  1. v1.0.0LatestNov 1, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Verified integrations