Skip to content

desenmascara.me

by desenmascara.me · remote · no sign-in to list tools · v0.1.0 · published by me.desenmascara

Is this website a scam? Dated, sourced fraud assessments of domains. Free, read-only, no key.

Final · 1
CompareRegistry entry

2 tools: 1 do something that can't be undone and 1 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http desenmascara https://desenmascara.me/mcp/v1

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warncheck_before_payment

    The server marks "check_before_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "check_before_payment" says "payment": a word that usually means money moves, which cannot be taken back.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

2 tools

Can't be undone 1Claude Code: ask
  • check_before_paymentFor an AI agent about to pay, or to submit card or account details, on a website: returns one action — 'do_not_pay', 'stop_and_ask_user' or 'no_fraud_found' — with the reason and t…1 finding

    Why it is in this group

    • The name "check_before_payment" says "payment": a word that usually means money moves, which cannot be taken back.
    • The input carries an amount (input.amount) and a currency, so it moves money.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "check_before_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "check_before_payment" says "payment": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    For an AI agent about to pay, or to submit card or account details, on a website: returns one action — 'do_not_pay', 'stop_and_ask_user' or 'no_fraud_found' — with the reason and the report link. 'do_not_pay' means the domain is published as fraudulent with evidence, or hides instructions aimed at AI agents. Anything not settled, including a domain never assessed, is 'stop_and_ask_user': hand the decision back to the person, never proceed on your own. 'no_fraud_found' is not a guarantee. Call it with the merchant's domain, not a payment page URL. desenmascara.me assesses whether a website domain is fraudulent, using evidence gathered at a point in time. It can and does decline to judge when the evidence is insufficient. It assesses domains, not URLs, and its assessment does not establish that a particular payment or action is safe.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
Only reads 1Claude Code: allow
  • get_domain_reportReturn desenmascara.me's existing assessment of a domain: the verdict, when it was reached, the recorded findings and a link to the published report.No findings

    Why it is in this group

    • The name "get_domain_report" says "get": a word for reading.
    Description, as the server wrote it
    Return desenmascara.me's existing assessment of a domain: the verdict, when it was reached, the recorded findings and a link to the published report. Reads stored data only — it starts no new analysis. A domain with no report returns status 'not_found', which says nothing about the site. desenmascara.me assesses whether a website domain is fraudulent, using evidence gathered at a point in time. It can and does decline to judge when the evidence is insufficient. It assesses domains, not URLs, and its assessment does not establish that a particular payment or action is safe.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http desenmascara https://desenmascara.me/mcp/v1

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__desenmascara__get_domain_report"
    ],
    "ask": [
      "mcp__desenmascara__check_before_payment"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as desenmascara. Review it before you use it.