io.github.devx-agent由 GitHub 帳號 devx-agent 發布v1.1.0更新於 Oct 30, 2026
Check crypto links for phishing lookalikes of wallets, exchanges and dapps before wallet connect
在連接錢包或簽名之前，檢查加密貨幣連結是否有釣魚跡象，例如仿冒網域、錯拼、punycode 與誘導字詞。
Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。
把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。
閱讀 https://sourceweft.com/mcp/io.github.devx-agent%2Fcrypto-link-check/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。把它新增到你客戶端的 mcpServers 設定中。
{
"mcpServers": {
"crypto-link-check": {
"type": "http",
"url": "https://crypto-link-check.nextill-pos.workers.dev/mcp"
}
}
}Is that MetaMask / Phantom / Ledger / exchange link real? Check it before you (or your agent) connect a wallet or sign anything.
October 2026 alone brought fake Phantom, Jupiter and Bitget browser extensions, a hijacked NGRAVE push alert that sent users to a seed-phrase page, and exchange phishing mails. AI agents can now trade from exchange accounts and pay for things on their own, so they click links too. This tool gives them (and you) a quick, read-only second opinion.
0/o, rn/m, Cyrillic), typosquats, punycode, free hosting and bait words like "claim" or "sync".https://crypto-link-check.nextill-pos.workers.devIt never asks for keys or seed phrases. Verdicts are heuristics, not guarantees.
Exit code: 0 official / no red flags, 2 caution / suspicious / dangerous, 1 error. --json for machine output.
Local (stdio), runs offline:
Remote (streamable HTTP, no key): https://crypto-link-check.nextill-pos.workers.dev/mcp
Tools: check_crypto_link(url) and full_report_info().
The paid route answers 402 with a PAYMENT-REQUIRED header; any x402 client can pay. Settlement happens only after the report is produced. Humans can pay from a browser wallet on the web page. Terms: /terms.
Verdicts: official, no_red_flags, caution, suspicious, dangerous. Same-name-different-TLD domains are only caution because the brand may own them.
cli/src/brands.js. It is curated by hand and incomplete. PRs that add brands or official domains (with a source) are welcome.
cli/: npm package devx-link-check (CLI + stdio MCP)worker/: the Cloudflare Worker behind the hosted APIMIT. Made by DevX. Contact [email protected].
來源：README.md，提交 810bfdd
Free, read-only, no network fetch: before connecting a wallet or signing, check a URL/domain for crypto phishing signs (lookalike or typosquat of ~60 wallets/exchanges/dapps, punycode, free hosting, bait words). Returns verdict official | no_red_flags | caution | suspicious | dangerous, plus a link to the paid full check (0.005 USDC via x402: domain age, DNS, redirects, page scan for seed-phrase prompts).
url必填How to buy the full link check via x402. Does not pay.
無需輸入參數。
已滿足適用檢查項的 100%
該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。
tattoo.check官方發布者
check.tattoo: tattoo size and placement guide 的託管 MCP 服務，由 check.tattoo 發布；無需登入；Streamable HTTP；5 個工具。
pt.iva官方發布者
在 VIES 中驗證歐盟增值稅號，並回傳葡萄牙增值稅法典（CIVA）與 RITI 條文，支援葡語與英語。
由 GitHub 帳號 throttler300 發布
一個本機 MCP 伺服器，把助理的引用綁定到已准入的來源文字並標註片段位置，可選擇拒絕雜湊已過期的引用。
由 GitHub 帳號 kriton-dev 發布
託管於 Apify 的遠端 MCP 伺服器，讓助理檢查網站宣告的七類 HTTP 安全標頭，且不傳回原始標頭值。
由 GitHub 帳號 Voopa-Corp 發布
對照創作要求審查已生成的影片，在再次付費算圖前建議是剪輯修改、重試一次還是更換做法。
npx devx-link-check phantorn.app metamask.io# verdict: dangerous phantorn.app# [danger] phantorn.app spells the official phantom.app with lookalike characters ...# verdict: official metamask.io{ "mcpServers": { "crypto-link-check": { "command": "npx", "args": ["-y", "devx-link-check", "mcp"] } } }