io.github.123Ergo/unphurl

 _   _ _   _ ____  _   _ _   _ ____  _
| | | | \ | |  _ \| | | | | | |  _ \| |
| | | |  \| | |_) | |_| | | | | |_) | |
| |_| | |\  |  __/|  _  | |_| |  _ <| |___
 \___/|_| \_|_|   |_| |_|\___/|_| \_\_____|

URL intelligence for AI tools. 13 MCP tools. 23 signals. 7 dimensions.

Give your AI agent eyes for URLs. Unphurl analyses any URL across 7 dimensions (redirect behaviour, brand impersonation, domain age, SSL/TLS, parked detection, URL structure, DNS enrichment) and returns structured signals with a configurable 0-100 risk score. Signals, not verdicts. Your agent decides what to do with them.

Works with Claude Code, Claude Desktop, Claude Cowork, ChatGPT desktop, Cursor, Windsurf, and any MCP-compatible tool.

What it costs

Every new account gets 20 free pipeline check credits. Most lookups are free. Known domains (Tranco Top 100K) and previously analysed domains return cached results at no cost. You only pay when an unknown domain runs through the full pipeline.

Package	Credits	Price	Per check
Starter	100	$9	$0.090
Standard	500	$39	$0.078
Pro	2,000	$99	$0.050
Scale	10,000	$399	$0.040

One-time purchases, no subscriptions. In typical use, 95-99% of URLs resolve free.

Quick start

1. Add to your MCP configuration

Add to your .mcp.json (Claude Code, Claude Desktop, Claude Cowork, ChatGPT desktop, Cursor, Windsurf, or any MCP-compatible tool):

{
  "mcpServers": {
    "unphurl": {
      "command": "npx",
      "args": ["-y", "@unphurl/mcp-server"],
      "env": {
        "UNPHURL_API_KEY": "uph_your_key_here"
      }
    }
  }
}

2. No account yet?

The AI can create one for you. Just ask: "Sign up for Unphurl." The signup tool works without an API key. After signup, add the key to your MCP configuration and restart.

3. Start checking URLs

Just talk to your AI:

"Check https://suspicious-domain.xyz"

"Batch check all URLs in this spreadsheet"

"Create a scoring profile called 'lead-qual' that weights parked domains at 30 and no MX record at 20"

"Check my credit balance"

No commands to memorize. No syntax to learn. Your AI handles the tool calls.

What you get back

Every check returns signals across 7 dimensions:

Dimension	What it tells you
Redirect behaviour	Full chain (up to 10 hops), shortener detection, stopped reasons
Brand impersonation	Levenshtein + homoglyph analysis against 150+ brands
Domain intelligence	Age, registrar, expiration, status codes, nameservers (via RDAP)
SSL/TLS	Real handshake validation from Cloudflare's edge
Parked detection	4-layer check: registrar pages, for-sale, empty content, parking services
URL structure	Length, path depth, subdomain count, entropy, IP detection, encoded chars
DNS enrichment	MX record existence (can the domain receive email?)

Every signal is business intelligence. Domain age tells you how established a company is. No MX record means they can't receive email. Expiring domains mean a business might be shutting down. Combined with your AI's ability to process in bulk and output to spreadsheets, it becomes a lightweight due diligence engine.

13 Tools

Tool	What it does	Auth
signup	Create a new account, get an API key	No
resend_verification	Resend verification email (3/hour limit)	Yes
check_url	Check a single URL across all 7 dimensions	Yes
check_urls	Batch check up to 500 URLs (handles async polling automatically)	Yes
list_profiles	List your custom scoring profiles	Yes
create_profile	Create or update a scoring profile with custom weights	Yes
delete_profile	Delete a scoring profile	Yes
show_defaults	Show all 23 scoring signals with default weights	No
get_balance	Check your pipeline

... View full README on GitHub