com.layercall由 layercall.com 发布官方发布者v1.0.0更新于 Oct 24, 2026
Score an IP, email, phone, domain or device for fraud in one call, with the signals behind it.
LayerCall 是一个远程欺诈评分服务，让助手对 IP、邮箱、电话、域名、设备和整次注册进行风险评分并给出处置建议。
Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/com.layercall%2Ftrust-api/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"layercall": {
"type": "http",
"url": "https://www.layercall.com/api/mcp",
"headers": {
"Authorization": "Bearer <YOUR_TOKEN>"
}
}
}
}[npm] [PyPI] [License] [Dependencies]
Official clients for LayerCall — score an IP, email, phone number, domain, or a whole signup for fraud in a single call.
Both clients have zero dependencies. A trust check sits on your signup path, which is the worst place in an application to introduce a dependency tree.
Get a free API key — 1,000 lookups a month, no card required, no daily cap.
Every endpoint returns the same shape: a 0–100 risk_score, an
allow | review | block verdict, and the signals behind it.
Prefer step-up over rejection. The review band starts where an ordinary
commercial VPN lands, and most VPN users are ordinary customers. Send them an
OTP or a 3-D Secure challenge instead of a refusal: a real user clears it in
seconds, an attacker cannot, and a false positive costs friction rather than a
customer. This is what Stripe Radar and Sift both converged on.
null means unknown, not "no". newly_registered is null when a TLD
publishes no RDAP (.de, .ru, .ac.uk among them), and mailbox_exists is
null when the mail provider does not answer honestly — Gmail and Yahoo accept
mail for addresses that do not exist. Treating either as a negative finding is
the specific mistake these fields exist to prevent.
Full reference: layercall.com/docs · OpenAPI 3.1: layercall.com/openapi.json
Test-mode keys return deterministic synthetic data, drawn from ranges
reserved for exactly this purpose — RFC 5737 addresses, example.com, the
555-01XX fiction block. Same shape and fields as production, so your assertions
are real ones. They never bill, never hit live data sources, and never write to
the shared reputation network.
Every fixture is documented, so you can assert on exact values rather than "did it return a number": layercall.com/docs/test-mode
LayerCall speaks the Model Context Protocol over Streamable HTTP, so Claude Code, Claude Desktop, ChatGPT, Cursor, VS Code, Windsurf and Zed can run a fraud check mid-conversation. There is nothing to install — it is a remote server, so you add a URL and your API key:
Seven tools are exposed: score_ip, verify_email, lookup_phone,
score_domain, score_device, verify_agent and score_user.
VS Code names the top-level key
servers, notmcpServers. That one difference is the usual reason a copied config silently does nothing.
Per-client setup: layercall.com/docs/mcp
Drop-in for the two places this usually goes. The middleware attaches
req.trust and leaves the decision to you:
There is deliberately no autoBlock: true. A one-line install that starts
rejecting people is the wrong default for a fraud tool — the failure is silent,
it lands on real customers, and you find out from a support ticket.
By default it only scores POST/PUT/PATCH, because a global app.use()
bills a lookup for every request including favicon.ico.
See node/src/express.ts and
node/src/next.ts (scoreRequest, withTrust).
Written for someone mid-incident rather than someone shopping. Each one ends with what a naive version gets wrong — including the parts that need no LayerCall at all.
MIT
来源：README.md，提交 e192ad7
Score an IP address
Risk-score an IPv4 or IPv6 address. Detects commercial VPNs (naming the provider where its own published list confirms it), proxies, Tor exit nodes and datacenter hosting, and returns geolocation, ASN and a 0-100 risk score with an allow/review/block verdict.
ip必填strictnessVerify an email address
Check an email for syntax, MX records, disposable/throwaway providers, role accounts (info@, admin@), homograph lookalikes and domain age. Returns a 0-100 risk score and an allow/review/block verdict.
email必填strictnessValidate a phone number
Validate a phone number worldwide against its national numbering plan. Returns E.164, country, line type (mobile/fixed/VoIP/toll-free/premium) and a risk score. Works globally, not US-only.
phone必填countrystrictnessScore a domain
Profile a domain: registration date from RDAP, registrar, MX/SPF/DMARC configuration, disposable-mail and risky-TLD detection. newly_registered is null when the age genuinely could not be determined — treat that as unknown, not as 'established'.
domain必填Score a device fingerprint
Judge a browser fingerprint from /fp.js: headless detection, automation frameworks (Selenium, Puppeteer, Playwright), timezone-versus-IP mismatch and repeat-device history. Note the ceiling honestly — the declared signals it relies on are the first thing stealth tooling patches, so a clean result is weaker evidence than a dirty one.
ipdevice_id必填Verify a signed AI agent (Web Bot Auth)
Cryptographically verify a Web Bot Auth signature (RFC 9421) — proof of WHICH agent is calling, not a guess from the user-agent. Returns verified true/false plus the agent's identity and declared purpose. This is the only check here that proves rather than infers, so it carries no score and no verdict: a verified assistant acting for a real user is usually welcome, a verified scraper usually is not, and that policy is the caller's. Pass the request the agent made to YOU — the signature covers its method, authority and path.
url必填methodheaders必填Score a whole signup
Score an entire signup in one call — any combination of IP, email, phone and domain — returning a single weighted risk score, a verdict, and the top contributing signals. A hard block on any component is never averaged away. This is the tool to use when judging a person rather than a value. Costs one lookup PER COMPONENT supplied, not one per call, so four identifiers cost four; the response reports the exact figure as billable_lookups, and cached components are refunded.
ipemailphonestrictnessphone_country已满足适用检查项的 100%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
export LAYERCALL_API_KEY=tl_live_...npx layercall ip 8.8.8.8npx layercall email [email protected]npx layercall domain example.comnpx layercall user --ip 1.2.3.4 --email [email protected]{ "ip": "185.220.101.1", "risk_score": 60, "verdict": "review", "signals": { "is_vpn": true, "is_proxy": true, "is_datacenter": true, "is_tor": true, "recent_abuse": false }, "geo": { "country": "DE", "city": "Berlin", "asn": "AS60729" }, "vpn_provider": null}{ "mcpServers": { "layercall": { "url": "https://www.layercall.com/api/mcp", "headers": { "Authorization": "Bearer YOUR_API_KEY" } } }}import { layercall } from "layercall/express";
app.post("/signup", layercall(), (req, res) => { if (req.trust.verdict === "block") return res.status(403).json({ error: "..." }); if (req.trust.verdict === "review") flagForManualReview(req.trust); createAccount(req.body);});