Urlhaus MCP server

Read from the package source without running it. The installed server may list more.

• lookup_payload

  Malware payload by SHA256.

• lookup_url

  Check one URL against URLhaus.

• recent_urls

  Recently added malicious URLs.

• search_tag

  URLs by malware tag.

• Code scan7 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancerepository not readable: repo not found3/15
• Maintainer identityno repository or website to verify2/10

Safety score

65/100

higher than 20% of 3,470 Web search servers

Tools

4

the typical Web search server has 5

Tools that change things

0%

typical: 0%. Fewer write tools means less an agent can break

Downloads a week

285

more than 76% of 827 Web search servers with a package

Urlhaus: common questions

Is Urlhaus MCP server safe?

With care: it is graded C, so read the findings first (65/100). Read the Urlhaus safety report

How do I install Urlhaus?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Urlhaus need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Urlhaus maintained?

The latest release is v1.0.0.

What can I use instead of Urlhaus?

Servers from other publishers that do the same job: SearXNG Search MCP server, CLIO Web MCP server and Vadivam Icons MCP server.

How does Urlhaus compare with other Web search MCP servers?

safety score 65/100 (higher than 20% of 3,470 Web search servers); tools 4 (the typical Web search server has 5); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.