# 123Ergo/unphurl-mcp [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/123Ergo/unphurl-mcp  
**GitHub Stars:** 1  
**npm Downloads (last month):** 27  
**Views:** 5  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/123ergo-unphurl-mcp

## Description
URL intelligence for AI agents. 13 tools for security signals and data quality: redirect behaviour, brand impersonation detection, domain age, SSL validation, parked detection, URL structural analysis, DNS enrichment.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "unphurl-mcp": {
    "command": "npx",
    "args": ["-y","unphurl"],
    "env": {
      "UNPHURL_API_KEY": ""
    }
  }
}
```

**Requires environment variables:** `UNPHURL_API_KEY` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What 123Ergo/unphurl-mcp MCP server does

123Ergo/unphurl-mcp MCP server exposes URL analysis through 16 MCP tools. A single check examines seven areas: redirect behavior, brand impersonation, domain intelligence, SSL/TLS, parked-domain indicators, URL structure, and DNS enrichment. Results contain individual signals and a configurable score from 0 to 100, leaving the final interpretation to the calling agent.

The analysis can identify redirect chains of up to 10 hops, URL shorteners, possible brand lookalikes using edit-distance and homoglyph analysis, RDAP domain details, certificate handshake results, parking indicators, structural URL characteristics, and whether an MX record exists. The README describes 25 available scoring signals.

## How it works

Add the MCP package to a compatible client and provide an Unphurl API key. The `check_url` tool handles one URL, while `check_urls` accepts batches of up to 500 URLs and manages asynchronous polling. Agents can then filter or transform the returned results, such as separating URLs below or above selected score thresholds.

Unknown domains use one pipeline credit per check. Known domains in the Tranco Top 100K and recently analyzed domains use cached results at no cost, but an account still needs a positive credit balance for checks. Failed pipeline checks are refunded. New accounts receive 20 free pipeline check credits, with additional credits available as one-time purchases.

123Ergo/unphurl-mcp MCP server also supports custom scoring profiles. Profiles can change signal weights for different tasks, such as emphasizing brand impersonation for security review or parked domains and missing MX records for lead-list validation. Trusted domains can be added to an allowlist to suppress scoring amplifiers.

## Setup and configuration

Install the project with the package command below in an MCP client configuration:

```json
{
  "mcpServers": {
    "unphurl": {
      "command": "npx",
      "args": ["-y", "@unphurl/mcp-server"],
      "env": {
        "UNPHURL_API_KEY": "uph_your_key_here"
      }
    }
  }
}
```

The `signup` tool can create an account without an API key. After receiving a key, add `UNPHURL_API_KEY` to the client configuration and restart the client. The README lists Claude Code, Claude Desktop, Claude Cowork, ChatGPT desktop, Cursor, Windsurf, and other MCP-compatible tools as supported environments.

## Tools and capabilities

Authenticated tools include:

- Check one URL or batch-check up to 500 URLs.
- Create, list, update, and delete scoring profiles.
- View credit balance, usage statistics, score thresholds, and check history.
- Manage a trusted-domain allowlist, including bulk additions of up to 100 domains per request.
- Resend verification email and purchase credit packages.

Unauthenticated tools include account signup, default signal-weight inspection, and pricing lookup. 123Ergo/unphurl-mcp MCP server is also available through a hosted MCP endpoint, CLI, and REST API, according to the repository documentation.

## Limitations and notes

The service is not described as a definitive safety verdict system; it returns signals for an agent or developer to evaluate. Pipeline checks depend on credits, and unknown domains may incur a charge. Credit packages are one-time purchases rather than subscriptions, with listed per-check prices ranging from $0.040 to $0.090. The README does not state retention periods for cached results or provide guarantees about the accuracy of individual signals.

_Full upstream README: https://allmcps.com/mcp/123ergo-unphurl-mcp/readme_