Crypto Link Check

io.github.devx-agentPublished by GitHub account devx-agentv1.1.0Updated Oct 30, 2026

Check crypto links for phishing lookalikes of wallets, exchanges and dapps before wallet connect

The publisher's own server: check.tattoo: tattoo size and placement guide

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Checks a crypto link for phishing signs — lookalike domains, typosquats, punycode and bait words — before a wallet connect or signature.

What you can do
  • Check a URL or domain against the official domains of about 60 wallets, exchanges and dapps, returning a verdict from official to dangerous with findings
  • Explain how to buy the optional paid full report through x402; the tool itself does not pay
  • Run the same check locally as a CLI or offline stdio server, or call the hosted HTTP API
When to use it
Useful when an assistant or user is about to open a wallet, exchange or dapp link, connect a wallet or sign something, and wants a quick read-only second opinion on whether the domain looks like a phishing lookalike.
Requirements
Either the remote streamable HTTP endpoint (no key) or a local process via npx devx-link-check, which needs Node.js. No accounts, API keys or environment variables are declared. The optional full report requires paying 0.005 USDC per call via x402 on Base.
Before you install
Verdicts are heuristics, not guarantees, and the hand-curated official-domain list is incomplete. The paid full check costs 0.005 USDC per call (1-10 URLs) and fetches the page once; the server does not pay on your behalf. It states it never asks for keys or seed phrases.

Installation

In SourceWeft

  1. Open Crypto Link Check in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.devx-agent%2Fcrypto-link-check/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "crypto-link-check": {
      "type": "http",
      "url": "https://crypto-link-check.nextill-pos.workers.dev/mcp"
    }
  }
}

README

Crypto Link Check

Is that MetaMask / Phantom / Ledger / exchange link real? Check it before you (or your agent) connect a wallet or sign anything.

October 2026 alone brought fake Phantom, Jupiter and Bitget browser extensions, a hijacked NGRAVE push alert that sent users to a seed-phrase page, and exchange phishing mails. AI agents can now trade from exchange accounts and pay for things on their own, so they click links too. This tool gives them (and you) a quick, read-only second opinion.

  • Free, offline: CLI and MCP server that compare a link with the official domains of ~60 wallets, exchanges and dapps and flag lookalike characters (0/o, rn/m, Cyrillic), typosquats, punycode, free hosting and bait words like "claim" or "sync".
  • Free API + remote MCP: https://crypto-link-check.nextill-pos.workers.dev
  • Paid full check (optional, 0.005 USDC via x402 on Base): adds domain registration age (RDAP), DNS, redirect tracing and one fetch of the page scanned for seed-phrase prompts and token-approval drainer code. 1-10 URLs per call.

It never asks for keys or seed phrases. Verdicts are heuristics, not guarantees.

CLI

bash
npx devx-link-check phantorn.app metamask.io# verdict: dangerous  phantorn.app#   [danger] phantorn.app spells the official phantom.app with lookalike characters ...# verdict: official  metamask.io

Exit code: 0 official / no red flags, 2 caution / suspicious / dangerous, 1 error. --json for machine output.

MCP

Local (stdio), runs offline:

json
{ "mcpServers": { "crypto-link-check": { "command": "npx", "args": ["-y", "devx-link-check", "mcp"] } } }

Remote (streamable HTTP, no key): https://crypto-link-check.nextill-pos.workers.dev/mcp

Tools: check_crypto_link(url) and full_report_info().

HTTP API

RoutePriceWhat
GET /api/basic?url=...freelexical verdict + findings
GET /v1/check?url=...&url=...0.005 USDC (x402 v2 exact, eip155:8453)full check, 1-10 URLs
GET /brands.jsonfreethe official-domain list we use
GET /openapi.json, /.well-known/x402.jsonfreediscovery

The paid route answers 402 with a PAYMENT-REQUIRED header; any x402 client can pay. Settlement happens only after the report is produced. Humans can pay from a browser wallet on the web page. Terms: /terms.

Verdicts: official, no_red_flags, caution, suspicious, dangerous. Same-name-different-TLD domains are only caution because the brand may own them.

Official-domain list

cli/src/brands.js. It is curated by hand and incomplete. PRs that add brands or official domains (with a source) are welcome.

Layout

  • cli/: npm package devx-link-check (CLI + stdio MCP)
  • worker/: the Cloudflare Worker behind the hosted API

MIT. Made by DevX. Contact [email protected].

Guide

Source: README.md at commit 810bfdd

Tools

2

full_report_info

How to buy the full link check via x402. Does not pay.

Takes no parameters.

Version history

2
  1. v1.1.0LatestOct 30, 2026
  2. v1.0.0Oct 30, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Check integrations

check.tattoo: tattoo size and placement guide

tattoo.checkOfficial publisher

check.tattoo: tattoo size and placement guide's hosted MCP server, published by check.tattoo; no sign-in required; Streamable HTTP; 5 tools.

Streamable HTTPWeb executable
5 toolsOct 24, 2026

iva.pt — EU VAT check (VIES) and Portuguese VAT law

pt.ivaOfficial publisher

Validates EU VAT numbers against VIES and returns Portuguese VAT Code (CIVA) and RITI articles, in Portuguese or English.

Streamable HTTPWeb executable
Business & Commerce4 toolsOct 30, 2026

Dirtsmith Evidence Quote Check

Published by GitHub account throttler300

A local MCP server that binds an assistant's citations to admitted source text with spans and can reject stale-hash references.

STDIODesktop only
Knowledge & MemoryNot validated yetNov 7, 2026

HTTP Header Policy Check — HSTS, CSP & Frame Declarations

Published by GitHub account kriton-dev

Remote Apify-hosted MCP server that lets an assistant check seven declared HTTP security header families on a site, without returning raw header values.

Streamable HTTPWeb executableAuth
Security & MonitoringCredential requiredNov 7, 2026

VOOPA Render Check

Published by GitHub account Voopa-Corp

Reviews a completed AI-generated video against its brief and recommends whether to edit, retry once, or change approach before paying for another render.

Streamable HTTPWeb executable
AI & ML2 toolsNov 7, 2026