Inspector

io.github.gridinsoft由 GitHub 账号 gridinsoft 发布v1.0.7更新于 Oct 30, 2026

Website safety and trust analysis. Verify domain reputation and detect phishing with GridinSoft.

概览

AI 生成的概览

GridinSoft Inspector 的 MCP 服务器,让助手查询域名信誉、判断网站是否安全,并扫描 URL 中的钓鱼或恶意内容。

可以做什么
  • 查询域名的信誉评分、安全判定、分类和报告链接
  • 快速判断网站是否安全、恶意或诈骗
  • 扫描具体链接或登录页面,检测钓鱼、恶意软件和欺诈跳转
  • 查看剩余 API 额度和订阅方案状态
  • 除 MCP 服务器外,也可通过命令行执行同样的检查
适用场景
适合在信任某个链接、域名或登录页之前让助手先做核查,或回答关于网站可靠性与安全性的问题。适用于调研、客服和安全初筛等只需信誉查询的场景。
运行要求
需要 Node.js 22 或更高版本,且 MCP 主机可调用 npm/npx;还需通过环境变量 GRIDINSOFT_API_KEY 提供 GridinSoft Inspector API 密钥。该包以 stdio 在本地运行并通过 HTTPS 调用 Inspector REST API,因此需要网络访问。URL 扫描最长约 90 秒,建议将客户端请求超时设为至少 120 秒。
安装前请注意
每次查询都会消耗付费 API 额度(域名检查 3 点,URL 扫描 10 点;新账户每月有 100 点免费额度),且适配器不会自动重试,因为已提交的扫描可能已扣除额度。Unknown 判定表示没有可用评估,并不代表目标安全。API 密钥属于机密,通过 GRIDINSOFT_API_KEY 传入;提交的域名和 URL 会发送给 GridinSoft。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Inspector,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@gridinsoft/mcp-inspector

A Model Context Protocol server for domain reputation and URL analysis, powered by GridinSoft Inspector.

Requirements

  • Node.js 22 or newer, with npm/npx available to your MCP host.
  • A GridinSoft Inspector API key from your profile.

The npm package runs locally over stdio and calls the Inspector REST API over HTTPS. https://inspector.gridinsoft.com/mcp is the documentation page; /mcp/v1 is the REST bridge used by this package. Neither URL is a native remote MCP Streamable HTTP or SSE endpoint.

Connect an MCP client

Add this entry to your client's MCP server configuration:

json
{  "mcpServers": {    "gridinsoft": {      "command": "npx",      "args": ["-y", "@gridinsoft/mcp-inspector"],      "env": {        "GRIDINSOFT_API_KEY": "your_api_key_here"      }    }  }}

Use the configuration location and command transport supported by your MCP host. If it cannot find npx, supply the absolute path to your Node.js installation's npx executable.

URL scans may take up to 90 seconds. Where your client supports it, set its MCP request timeout to at least 120 seconds. The adapter's HTTP timeout defaults to 110 seconds and can be configured with GRIDINSOFT_TIMEOUT_MS (a positive integer in milliseconds). The adapter does not automatically retry requests, because a submitted scan may have already consumed credits. After a timeout, check the Inspector dashboard before submitting it again.

Tools

ToolInputPurposeCredits
inspect_domain{"domain":"example.com"}Available reputation score, verdict, categories, and report link3
check_domain_safety{"domain":"example.com"}Alias for inspect_domain3
get_domain_reputation{"domain":"example.com"}Alias for inspect_domain3
scan_url{"url":"https://example.com/login"}Page metadata and available security signals; additional analysis depends on the plan10
get_balance{}Remaining credits and subscription statusFree

An Unknown verdict means no assessment is available; it does not mean the target is safe. Tool execution errors return isError: true, with an explanation in content. Discovery or prompt/resource failures surface as MCP errors.

Prompts and resources

  • check-website-safety requires the site argument (a URL or domain).
  • verify-domain-trust requires the domain argument.
  • gs://guide/threat-categories describes the security and content categories. A content category alone does not establish malware or fraud.

Example prompt arguments:

json
{  "name": "check-website-safety",  "arguments": { "site": "https://example.com" }}

Command-line use

With GRIDINSOFT_API_KEY set in your environment:

sh
npx -y @gridinsoft/mcp-inspector check example.comnpx -y @gridinsoft/mcp-inspector inspect example.comnpx -y @gridinsoft/mcp-inspector scan https://example.com/loginnpx -y @gridinsoft/mcp-inspector --help

Commands print the JSON tool result and exit with a nonzero status on failure. Running without arguments starts the stdio MCP server when launched by a client.

Plans

New accounts receive 100 free API credits per month. See the Inspector dashboard for current plans and pricing.

Development

sh
npm cinpm testnpm run buildnpm pack --dry-run

The tests cover MCP initialization, discovery, prompt argument forwarding, resources, tool aliases, authentication errors, HTTP failures, cancellation, timeouts, stdio framing, and CLI exit codes. An additional backend integration fixture can be run against an Inspector checkout with Composer dependencies installed:

sh
INSPECTOR_TEST_ROOT=/absolute/path/to/inspector node --test test/php-integration.cjs

This fixture starts a temporary localhost PHP server, uses the real MCP routes/controller, and makes only public or unauthenticated requests. It does not load the application's environment file or perform paid scans.

License

MIT

来源:README.md,提交 31993fc

工具

5

inspect_domain

Domain reputation assessment. Returns the available reputation score (0-100), security verdict, categories, and report link. Unknown means no assessment is available, not that the domain is safe. Use this tool when users ask about site reliability, trust, or safety.

输入参数domain必填

check_domain_safety

Semantic alias for inspect_domain. Quick check if a website is safe, malicious, or a scam. Returns reputation score and security verdict.

输入参数domain必填

get_domain_reputation

Semantic alias for inspect_domain. Get the trust and reputation score (0-100) for a domain.

输入参数domain必填

scan_url

Deep forensic URL analysis. Detects phishing, malware, and fraudulent redirects. Use this to verify specific links, login pages, or suspicious URLs. Returns page metadata and available security signals; additional analysis depends on the subscription plan.

输入参数url必填

get_balance

Check remaining API credits and subscription plan status

无需输入参数。

版本历史

2
  1. v1.0.7最新Oct 22, 2026
  2. v1.0.6Sep 16, 2026

评分

已满足适用检查项的 90%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分
  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分