Back to Browse

Is Real Biz MCP Server

Developer ToolsUse Caution2.0MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Verify business legitimacy by domain or name in <2s. Trust score, verdict, evidence. x402-payable.

About

Verify business legitimacy by domain or name in <2s. Trust score, verdict, evidence. x402-payable.

Remote endpoints: streamable-http: https://is-real-biz.is-real-biz.workers.dev/mcp

Security Report

2.0
Use Caution2.0Critical Risk

Security analysis completed but the response could not be fully parsed. Manual review recommended. Supply chain analysis found 7 known vulnerabilities in dependencies (0 critical, 2 high severity).

4 files analyzed ยท 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

is-real-biz

Pay-per-call API that tells AI agents whether a domain is a real business. Built MCP-first. Two payment rails: x402 (autonomous, zero signup) + prepaid credits (50 free checks, no credit card).

๐Ÿš€ Live: https://is-real-biz.is-real-biz.workers.dev โ€” try it now:

curl -X POST https://is-real-biz.is-real-biz.workers.dev/billing/signup \
  -H 'content-type: application/json' -d '{"email":"you@example.com"}'
# returns: { api_key: "irb_live_...", credits_cents: 250 } โ€” 50 free checks
GET /check?domain=stripe.com   โ†’   { verdict: "real", score: 94, signals: { ... } }

Use cases: KYB / vendor screening, lead qualification, fraud checks, due diligence โ€” anywhere an agent needs to know "is this domain a legit business or a parked/scam/fake site?"


Why agents will find this

Discovery surfaces (over-served on purpose โ€” every agent looks somewhere different):

SurfacePathSpec
MCP descriptor/.well-known/mcp.jsonmodelcontextprotocol.io
MCP HTTP endpoint/mcpstreamable HTTP
OpenAPI 3.1/openapi.jsonOpenAPI
llms.txt/llms.txtllmstxt.org
ai.txt/ai.txtearly crawler convention
ChatGPT plugin/.well-known/ai-plugin.jsonlegacy
A2A agent card/.well-known/agent.jsonA2A v1
agents.json/.well-known/agents.jsonWildcard spec
Pricing manifest/pricing.jsonthis server
robots/sitemap/robots.txt, /sitemap.xmlSEO

Plus the tool descriptions in src/tool-descriptions.ts are written for embedding-based tool selection โ€” the way Claude/ChatGPT/Cursor actually pick which tool to call. Lots of natural-language examples, use-case tags, and example queries.


Why agents can pay it

  • x402 (spec) โ€” the HTTP 402 payment protocol pushed by Coinbase + Cloudflare. Agents send an X-PAYMENT header, the server verifies + settles via a facilitator in ~2 seconds. Zero signup. No accounts. Sub-cent calls work. Default network is Base Sepolia testnet (free) โ€” flip X402_NETWORK = "base_mainnet" in wrangler.toml to take real payments.
  • Prepaid credits โ€” POST /billing/signup with an email returns an API key with 50 free checks. Need more? Redeem an operator-issued promo code at /billing/promo. No credit card, no Stripe, no card-on-file.

Both paths share the same /check endpoint, so any agent that speaks either rail just works.


Zero-cost deploy (โ‰ˆ 5 minutes)

You only need:

  1. A free Cloudflare account (workers.dev subdomain is free forever) โ€” sign up
  2. A free Google AI Studio key for Gemini 1.5 Flash (no credit card) โ€” get key

Then:

git clone <this repo> is-real-biz && cd is-real-biz
npm run setup      # runs deploy.sh โ€” creates D1, KV, applies schema, sets secrets, deploys

The script is interactive: it logs you into Cloudflare, provisions D1 + KV, patches wrangler.toml with the IDs, asks for your Gemini key, and deploys. You'll have a live URL like https://is-real-biz.<your-subdomain>.workers.dev.

Manual deploy

npm install
npx wrangler login
npx wrangler d1 create is-real-biz-db          # paste id into wrangler.toml
npx wrangler kv namespace create CACHE         # paste id into wrangler.toml
npx wrangler d1 execute is-real-biz-db --file=./schema.sql --remote
npx wrangler secret put GEMINI_API_KEY
npx wrangler deploy

Optional secrets

npx wrangler secret put ADMIN_TOKEN     # to mint promo codes via POST /admin/promo
npx wrangler secret put X402_PAY_TO     # your 0x address to enable x402 payments

Try it

# 1. Get a free key (50 checks included)
curl -X POST https://YOUR-WORKER-URL/billing/signup \
  -H 'content-type: application/json' \
  -d '{"email":"you@example.com"}'

# 2. Check a domain
curl 'https://YOUR-WORKER-URL/check?domain=stripe.com' \
  -H 'authorization: Bearer irb_live_...'

# 3. Batch
curl -X POST https://YOUR-WORKER-URL/check/batch \
  -H 'authorization: Bearer irb_live_...' \
  -H 'content-type: application/json' \
  -d '{"domains":["stripe.com","openai.com","sketchy.xyz"]}'

Use it from Claude / Cursor / Windsurf (MCP)

{
  "mcpServers": {
    "is-real-biz": {
      "url": "https://YOUR-WORKER-URL/mcp",
      "headers": { "Authorization": "Bearer irb_live_..." }
    }
  }
}

Issuing promo codes (operator)

# Mint a 100-credit ($1) code, single use
curl -X POST https://YOUR-WORKER-URL/admin/promo \
  -H "X-Admin-Token: $ADMIN_TOKEN" \
  -H 'content-type: application/json' \
  -d '{"amount_cents":100,"max_uses":1,"note":"HN launch"}'

# Mint a multi-use launch code
curl -X POST https://YOUR-WORKER-URL/admin/promo \
  -H "X-Admin-Token: $ADMIN_TOKEN" \
  -H 'content-type: application/json' \
  -d '{"code":"LAUNCH50","amount_cents":250,"max_uses":500}'

How the verdict is computed

SignalSourceCost
Domain age + registrarRDAP via rdap.orgfree
SSL validityCertificate Transparency (crt.sh)free
Homepage classificationGemini 1.5 Flashfree (1500/day)
Contact info presenceregex over homepage + /contactfree
Social-media footprintregex over homepagefree

Weighted combination โ†’ score 0-100 โ†’ verdict {real, likely_real, uncertain, likely_fake, fake}. Cached for 24h in KV.


Submit to MCP registries (after deploy)


License

MIT.

Reviews

No reviews yet

Be the first to review this server!

Is Real Biz MCP Server - Verify business legitimacy by domain or name in <2s. Trust | MCP Marketplace