Fraud & scam detection MCP servers

A server here checks whether a link, number, merchant, token or document is a scam or fraudulent.

Not here: general reviews.

739servers
539 remote200 localTagged by Odel's AI, which can make mistakes

Best fit

400 made for this, ranked by starsRemoteLocal
  1. TWZRD @twzrd-sol/twzrd-mcpAuto-pay MCP for the TWZRD Trust API: free preflight + x402-paid Solana trust intelNot assessed yet.Runs on your machine, installed from PyPI.
  2. Romania @robyroro/romania-mcpRomanian public data: ANAF company status, financials, court cases, BNR rates, shop checksNot assessed yet.Runs on your machine, installed from PyPI.
  3. Lumière PayCheck @book0feli/paycheckCheck any x402 endpoint before your AI agent pays it: trust grade, verdict, and hijack checks.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  4. loophole tape: Solana token safety @loopholetape/solana-token-safetySolana token safety and pump.fun rug checks: free for any mint, paid depth in USDC on Solana or Base9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  5. Castle MCP by usefulapi @usefulapi/castleInvestigate security events and manage the allow/deny lists an analyst acts on.Not assessed yet.A remote server; no sign-in.
  6. SaveSaveSaveSave @stefantsezarov/savesavesavesaveCheck messages, npm packages and crypto addresses before acting. Read-only scanner tools.Not assessed yet.Runs on your machine, installed from npm.
  7. MarketNow @alicelabs-llc/marketnowVerify agent credentials, 9 formats, scam domains; search 70k+ MCP servers with auth-gate state.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. Brand Lookalike Watch @yzf75011-ui/brand-lookalike-watchPhishing/typosquat domains imitating a brand, from CT logs. Weekly email: $2.99/mo on Gumroad.52% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  9. Solana Token Intelligence @penniless-agent/token-intelSolana token due-diligence: 3-source fused risk verdict incl. LP-lock depth. $0.01 via x402.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  10. Verdix address risk @verdixapi/verdixCheck an EVM address on Base before sending funds: safe/caution/danger. Pays per call via x402.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  11. TWZRD Agent Intelligence @twzrd/twzrd-agent-intelPre-spend trust for AI agents that buy: check x402 services and product listings before paying.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  12. MaxMind minFraud MCP by usefulapi @usefulapi/maxmind-minfraudMCP server for MaxMind minFraud — score transactions for fraud risk from your AI assistant.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. Onchain Data MCP @madlabs-tech/onchain-data-mcpBlockchain data for EVM and Solana: balances, tokens, prices, DeFi and RPC via free-tier vendors5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  14. Solana Pulse: agent safety layer @timothymycompc/solana-pulse-gatewayStops AI agents losing money on Solana: pre-sign checks, intent matching, token verdicts. x402 USDC.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  15. CyberWareX Defi Oracle @cyberpunk11147/cyberwarex-defi-oracleToken safety: honeypot sim, contract powers, rug checks, watch alerts, plain card, paper test.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  16. CyberWareX Wallet Safety @cyberpunk11147/cyberwarex-wallet-safetyPre-sign wallet safety: tx simulation, signature decoding, address risk, ABI, URL phishing.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  17. MobileValidate @mobilevalidate/mcpCheck phone numbers (WhatsApp, Telegram, carrier, spam reputation) and e-mail addresses.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  18. PumpPill — token safety and measured outcomes @pumppill/token-safetyToken safety, FOMO flow, graded calls and agentic trading on Robinhood Chain and Solana; x4027% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Solana X402 Compliance @msantagiulianab/solana-x402-complianceRFC 9110 x402 Solana compliance screening and micropayments gateway for AI agents.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  20. Genesis402 by UnyKorn (x402 pay-per-call) @fthtrading/genesis402-mcpCounterparty checks, sanctions screening, company lookup and 360+ pay-per-call APIs over x402.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. Swarm0x @swarm0x/swarm0xRun before you buy on Robinhood Chain: a simulated buy and sell, plus trades your own wallet signs.18% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. 100pro Token Risk @rendraputra/100pro-token-riskRead-only risk tools: token screen, contract source, wallet. $0.10 USDC on Base.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. PG1 Sovereign Threat Intelligence @project-gifted1/pg1-threat-intelThreat intel for AI agents: IOCs, CVEs (EPSS/KEV), wallet sanctions and age, domain and URL checks.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. Collar Guardrail — Pre-Trade Risk Layer @aiguardrail/backendDeterministic pre-trade risk checks for AI agents on Robinhood Chain. Returns allow/warn/deny.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.