MCP.Market

SkanQRCode MCP server

by skanqrcode.com·com.skanqrcode/mcp-server·v1.0.0
No reviews yet

Check whether a URL or IP is safe before an AI agent fetches or opens it.

A85/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A85/100

full report

Adoption
Growing

0 stars249 downloads/wk

Reviews

Write one

Nobody has reviewed SkanQRCode yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

SkanQRCode tools (2)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • check_url

    Classifies a URL or IP address as malicious, suspicious or not_malicious. Call it before you

  • get_usage

    Returns the account's monthly quota, requests used and requests still available for a calendar

Public scan report

scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; website matches verified namespace9/10
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How SkanQRCode compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
85/100
higher than 73% of 4,460 AI and agents servers
Tools
2
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
249
more than 77% of 1,538 AI and agents servers with a package

What its tools let an agent do: 2 read

Install SkanQRCode in Claude Code, Cursor or VS Code

Runs npx -y @skanqrcode/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-server -- npx -y @skanqrcode/mcp-server
Add to Cursor

What the publisher says

From the SkanQRCode repository's README, as published. We do not edit it. Read it on GitHub

SkanQRCode SDK examples

Code examples and installable SDK packages for SkanQRCode, a real-time URL/QR-code safety API — POST a URL or IP to /v1/check and get back malicious / suspicious / not_malicious in under 200ms, meant to gate "should I open this link" decisions right after scanning a QR code or following an inbound link.

Start here: docs/api-contract.md — the exact request/response contract every example in this repo follows. It mirrors the published OpenAPI spec (v1.7.0) at docs.skanqrcode.com/openapi.json; when that spec changes, update the contract doc first, then the SDKs.

Layout

docs/
  api-contract.md      the canonical request/response contract (read this first)

quickstart/<lang>/      raw HTTP usage, no SDK — good for a 5-minute "does this work" test
sdk/<lang>/              installable SDK package with a typed SkanQRCodeClient
mobile/<platform>/       a QR-scan-then-check screen for a real mobile app
mcp/                      MCP server + client examples for agent/LLM tool-calling

Every SDK exposes the same shape adapted to its language's conventions: a SkanQRCodeClient (or Client) constructed with an API key, plus one method per API operation:

Errors are typed and carry code/message/requestId, the HTTP status and, for a 429, retryAfter seconds. A shouldBlock/isSafe-style helper is built on action so callers don't have to switch on the raw enum themselves. The billing webhook isn't exposed — it isn't for API clients. Every mobile example scans a QR code with the platform's standard local decoder, calls checkUrl before opening the link, and fails closed (doesn't auto-open) on a network error or timeout.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

SkanQRCode: common questions

Is SkanQRCode MCP server safe?
Yes, by our scan: it is graded A (85/100). Read the SkanQRCode safety report
How do I install SkanQRCode?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does SkanQRCode need an API key?
Yes. The registry entry asks for SKANQRCODE_API_KEY.
Is SkanQRCode maintained?
The last commit was 28 days ago (2026-10-07). The latest release is v1.0.0.
What can I use instead of SkanQRCode?
Servers from other publishers that do the same job: Decionis MCP server, Kiln MCP server and Vibe Check MCP server.
How does SkanQRCode compare with other AI and agents MCP servers?
safety score 85/100 (higher than 73% of 4,460 AI and agents servers); tools 2 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to SkanQRCode

Same job from other publishers: the closest match first, then the best rated.

  • Decionis
    Authorize consequential AI agent actions before execution
    A
  • Kiln
    Spawn an object into existence: describe it, and your agent designs it, checks it, and 3D prints it.
    B
  • Vibe Check
    Metacognitive AI agent oversight: adaptive CPI interrupts for alignment, reflection and safety
    B
  • paper-preflight
    Checks every LaTeX reference against Crossref, dblp, arXiv, DataCite, PubMed and OpenAlex. No LLM.
    A