Scamcheck Mcp Server

io.github.smijo-geekPublished by GitHub account smijo-geekv1.1.2Updated Oct 24, 2026

Scan suspicious messages, URLs, and text for scams with AI. Free tier - no API key required.

VerifiedStreamable HTTPWeb executableWeb Search & Scraping Security & Monitoring

Server details

Identifier: io.github.smijo-geek/scamcheck-mcp-server
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account smijo-geek for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.smijo-geek%2Fscamcheck-mcp-server.svg)](https://sourceweft.com/mcp/io.github.smijo-geek%2Fscamcheck-mcp-server?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

ScamCheck MCP server lets an assistant scan suspicious messages, URLs or text for scam indicators and return a verdict, risk score and advice.

What you can do: Scan a pasted message, URL or text for scam indicators and get a verdict (Likely Scam, Suspicious or Likely Safe).
Receive a risk score from 0 to 100, a category, a confidence percentage and the reasons that were flagged.
Get recommended next actions for the user, such as not clicking links or contacting a bank directly.
When to use it: Useful when a user shares a message, link or text they suspect is a scam and wants a quick assessment with reasons and suggested next steps, inside any MCP-capable assistant.
Requirements: Runs as a remote endpoint or as a local npm package via npx, so Node.js is needed for the local option. No signup or API key is required for the free anonymous tier; an optional SCAMCHECK_API_KEY raises limits. Network access to the ScamCheck API is required.

Before you install

The text or URL you scan is sent over HTTPS to a third-party API and analysed by an AI model provider; scans may be stored to create shareable result links and to improve detection. Anonymous use is rate-limited by IP. The optional SCAMCHECK_API_KEY is a secret and should be kept out of shared configs.

Installation

In SourceWeft

Open Scamcheck Mcp Server in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.smijo-geek%2Fscamcheck-mcp-server/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "scamcheck": {
      "type": "http",
      "url": "https://scamcheck.tech/api/mcp"
    }
  }
}

README

ScamCheck MCP Server

Scan suspicious messages, URLs, and text for scams inside any AI assistant that supports MCP (Claude Desktop, Claude Code, Cursor, and more). No signup or API key needed — works out of the box on the free anonymous tier.

Quick start (no API key)

Add to your Claude Desktop / Cursor config:

json

{  "mcpServers": {    "scamcheck": {      "command": "npx",      "args": ["scamcheck-mcp-server"]    }  }}

{  "mcpServers": {    "scamcheck": {      "command": "npx",      "args": ["scamcheck-mcp-server"]    }  }}

That's it. Ask your assistant "is this message a scam?" and paste the message.

Higher limits (optional API key)

The anonymous tier is rate-limited per IP. For higher limits, grab a free key at scamcheck.tech/dashboard/developer and add it:

json

{  "mcpServers": {    "scamcheck": {      "command": "npx",      "args": ["scamcheck-mcp-server"],      "env": {        "SCAMCHECK_API_KEY": "sk-live-your-key-here"      }    }  }}

{  "mcpServers": {    "scamcheck": {      "command": "npx",      "args": ["scamcheck-mcp-server"],      "env": {        "SCAMCHECK_API_KEY": "sk-live-your-key-here"      }    }  }}

Tool: `scan_message`

Example response

🔴 Likely Scam — Risk Score: 89/100Category: phishing · Confidence: 92%
Summary: This message impersonates a bank to steal credentials.
Why this was flagged:• Creates false urgency with account suspension threat• Uses a URL that does not match the official bank domain• Requests sensitive personal information via link
What to do:✓ Do not click any links in this message✓ Contact your bank directly using the number on your card✓ Report to your bank's fraud department
Full report: https://scamcheck.tech/result/abc123

🔴 Likely Scam — Risk Score: 89/100Category: phishing · Confidence: 92%
Summary: This message impersonates a bank to steal credentials.
Why this was flagged:• Creates false urgency with account suspension threat• Uses a URL that does not match the official bank domain• Requests sensitive personal information via link
What to do:✓ Do not click any links in this message✓ Contact your bank directly using the number on your card✓ Report to your bank's fraud department
Full report: https://scamcheck.tech/result/abc123

Rate limits

Anonymous (no key): IP rate-limited
Free API key: 100 scans/month
Pro/Business: Unlimited

Install in Claude Desktop (one click)

Download scamcheck.mcpb and double-click it, or drag it into Claude Desktop → Settings → Extensions. The API key field is optional; leave it blank to use the free tier.

Privacy Policy

Full policy: scamcheck.tech/privacy

What is collected: only the text or URL you ask the scan_message tool to check, plus the optional API key you configure. The extension reads nothing else from your computer or your conversations.
How it is used: the content is sent over HTTPS to the ScamCheck API (scamcheck.tech) and analysed to produce the verdict. Anonymous requests are rate-limited by IP address.
Storage and retention: scans may be stored to generate a shareable result link and to improve detection. Retention is described in the full policy linked above.
Third parties: ScamCheck uses an AI model provider to analyse scans. Your data is not sold or used for advertising.
Contact: privacy questions or deletion requests go to support via scamcheck.tech or the GitHub issues.

Source: README.md at commit c288deb

Tools

scan_message

Scan a message for scams

Scan a suspicious message, URL, or text for scam indicators using ScamCheck AI. Returns a verdict (Likely Scam / Suspicious / Likely Safe), risk score 0-100, category, confidence percentage, reasons flagged, and recommended actions. Use this whenever a user shares a message they received and wants to know if it's a scam.

Parametersinputrequiredsource

Version history

v1.1.2LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts

Parameter	Type	Required	Description
`input`	string	✓	The message, URL, or text to scan
`source`	`text` \| `url` \| `screenshot`	—	Content type (default: `text`)