io.github.devx-agent由 GitHub 账号 devx-agent 发布v1.1.0更新于 Oct 30, 2026
Check crypto links for phishing lookalikes of wallets, exchanges and dapps before wallet connect
在连接钱包或签名前检查加密链接是否有钓鱼迹象，如仿冒域名、错拼、punycode 和诱导词。
Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/io.github.devx-agent%2Fcrypto-link-check/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"crypto-link-check": {
"type": "http",
"url": "https://crypto-link-check.nextill-pos.workers.dev/mcp"
}
}
}Is that MetaMask / Phantom / Ledger / exchange link real? Check it before you (or your agent) connect a wallet or sign anything.
October 2026 alone brought fake Phantom, Jupiter and Bitget browser extensions, a hijacked NGRAVE push alert that sent users to a seed-phrase page, and exchange phishing mails. AI agents can now trade from exchange accounts and pay for things on their own, so they click links too. This tool gives them (and you) a quick, read-only second opinion.
0/o, rn/m, Cyrillic), typosquats, punycode, free hosting and bait words like "claim" or "sync".https://crypto-link-check.nextill-pos.workers.devIt never asks for keys or seed phrases. Verdicts are heuristics, not guarantees.
Exit code: 0 official / no red flags, 2 caution / suspicious / dangerous, 1 error. --json for machine output.
Local (stdio), runs offline:
Remote (streamable HTTP, no key): https://crypto-link-check.nextill-pos.workers.dev/mcp
Tools: check_crypto_link(url) and full_report_info().
The paid route answers 402 with a PAYMENT-REQUIRED header; any x402 client can pay. Settlement happens only after the report is produced. Humans can pay from a browser wallet on the web page. Terms: /terms.
Verdicts: official, no_red_flags, caution, suspicious, dangerous. Same-name-different-TLD domains are only caution because the brand may own them.
cli/src/brands.js. It is curated by hand and incomplete. PRs that add brands or official domains (with a source) are welcome.
cli/: npm package devx-link-check (CLI + stdio MCP)worker/: the Cloudflare Worker behind the hosted APIMIT. Made by DevX. Contact [email protected].
来源：README.md，提交 810bfdd
Free, read-only, no network fetch: before connecting a wallet or signing, check a URL/domain for crypto phishing signs (lookalike or typosquat of ~60 wallets/exchanges/dapps, punycode, free hosting, bait words). Returns verdict official | no_red_flags | caution | suspicious | dangerous, plus a link to the paid full check (0.005 USDC via x402: domain age, DNS, redirects, page scan for seed-phrase prompts).
url必填How to buy the full link check via x402. Does not pay.
无需输入参数。
已满足适用检查项的 100%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
tattoo.check官方发布者
check.tattoo: tattoo size and placement guide 的托管 MCP 服务，由 check.tattoo 发布；无需登录；Streamable HTTP；5 个工具。
pt.iva官方发布者
在 VIES 中校验欧盟增值税号，并返回葡萄牙增值税法典（CIVA）与 RITI 条文，支持葡语和英语。
由 GitHub 账号 throttler300 发布
一个本地 MCP 服务器，将助手的引用绑定到已准入的源文本并标注片段位置，可选拒绝哈希过期的引用。
由 GitHub 账号 kriton-dev 发布
托管在 Apify 上的远程 MCP 服务器，让助手检查网站声明的七类 HTTP 安全响应头，且不返回原始头值。
由 GitHub 账号 Voopa-Corp 发布
对照创作要求审查已生成的视频，在再次付费渲染前建议是剪辑修改、重试一次还是更换方案。
npx devx-link-check phantorn.app metamask.io# verdict: dangerous phantorn.app# [danger] phantorn.app spells the official phantom.app with lookalike characters ...# verdict: official metamask.io{ "mcpServers": { "crypto-link-check": { "command": "npx", "args": ["-y", "devx-link-check", "mcp"] } } }