Security & Testing
cautellus.com
Scans URLs and messages for phishing and scam risks, providing security checks before user interaction.
ENDPOINT 1
https://cautellus.com/api/mcp
MCP server metadata
- Name
- cautellus
- Version
- 1.0.0
Cautellus scam detection for AI agents. scan_url and scan_message return a safe/warn/danger verdict with a 0-100 risk score — gate risky actions on it (danger: do not proceed; warn: confirm with a human). Each scan consumes one prepaid credit from the API key in the Authorization header. Keys and credit packs: https://cautellus.com/developers. get_usage is free and reports the remaining balance.
Known tools 3
scan_urlCheck a URL or domain for phishing and scam risk before visiting, clicking, or transacting with it.
Inferred read-onlyscan_messageAnalyze a message, email, or text for scam indicators before acting on it (payment requests, verification codes, urgency pressure, impersonation).
Potential side effectsget_usageCheck the API key’s remaining prepaid scan credits, monthly plan usage, and credit expiry.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.cautellus]
url = "https://cautellus.com/api/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"cautellus": {
"type": "http",
"url": "https://cautellus.com/api/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: cautellus
Remote MCP URL: https://cautellus.com/api/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"cautellus": {
"url": "https://cautellus.com/api/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"cautellus": {
"type": "http",
"url": "https://cautellus.com/api/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "cautellus",
"transport": "streamable-http",
"url": "https://cautellus.com/api/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Loading Trust v2 evidence…
Checking the associated registrable domain. The BuiltWith key remains server-side.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.