Bonafido: Business Domain Verification API

io.github.shawmena-dotcomPublished by GitHub account shawmena-dotcomv1.0.0Updated Oct 24, 2026

Bonafido: is a domain a real business site? Verdict, trust score, risk flags.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Bonafido checks whether a domain, URL or email domain belongs to a real business, returning a verdict, trust score and risk flags.

What you can do
  • Verify a domain, URL or email domain and get a verdict such as verified or likely_legit, plus a trust score and risk flags.
  • Check domain age through RDAP and whether the domain resolves.
  • Inspect mail setup (MX, SPF, DMARC) and whether the homepage is live or a parked/for-sale page, including redirects.
  • Look up contact details, compare the company name, check the Wikidata official website and detect look-alike domains.
When to use it
Useful when an assistant needs to judge whether a website or email sender is a genuine business before trusting it, for example screening leads, vendors, or suspicious links. It suits one-off due-diligence checks rather than bulk domain research.
Requirements
A remote streamable HTTP endpoint; no package, account, API key or environment variable is declared. Network access to the endpoint is required.
Before you install
The verdict and trust score are third-party assessments and should not be treated as proof of legitimacy. Queries send the domain, URL or email domain you submit to the remote service.

Installation

In SourceWeft

  1. Open Bonafido: Business Domain Verification API in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.shawmena-dotcom%2Fdomain-verify/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "bonafido-business-domain-verification-ap": {
      "type": "http",
      "url": "https://bonafido.cybermax-tools.workers.dev/mcp"
    }
  }
}

README

This repository has no README.

Tools

1

verify_domain

Is this business domain real and legit?

Verify a business domain, URL or email domain: does it resolve, how old is it (RDAP), mail setup (MX/SPF/DMARC), live homepage vs parked/for-sale page, redirects, contact details, company-name match, Wikidata official website and look-alike detection. Returns verdict (verified/likely_legit/unverified/suspicious/not_found), trustScore 0-100, riskFlags and evidence. Pass company_name to check the domain belongs to that company. Up to 5 domains via "domains".

Parametersdomainrequiredcountrydomainscompany_name

Version history

1
  1. v1.0.0LatestSep 26, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.