Official MCP RegistryListed
RelayShield Scam Checks
Free scam checks for links, wallets, emails, and breach exposure. No signup.
First seen 2 Oct 2026. Evidence as of 11 Nov 2026.
4
Tools
From an anonymous probe
1
Source listings
Each with its own history
5
Recorded changes
Since first seen
Tools
| Tool | Description | Behaviour |
|---|---|---|
| check_breach | Checks whether an email address appears in known data breaches. Provide `email`. Returns the number of breaches found with the named sources behind each; a count of zero means no breaches were found in the corpus, not that the address is safe. Read-only: it only looks up breach records. Requires the RELAYSHIELD_API_KEY environment variable; without it, the tool returns setup instructions instead of calling the API. | Read-only |
| check_email | Scores a suspicious email for phishing signals from its parsed fields. Provide any of: from_address, from_name, reply_to, return_path, subject, body_text, and links (up to 25). Returns a risk level and score with the specific flags behind them; links in the email are also checked against RelayShield's threat-intelligence corpus. A verdict of unknown means nothing conclusive was found; this tool never reports an email as safe. | Read-only |
| check_link | Checks one URL, or up to 25 URLs in a single call, against RelayShield's threat-intelligence corpus for known phishing, malware, and scam abuse. Provide either `url` (a single http:// or https:// link) or `urls` (an array of up to 25 links). Returns a per-link verdict of FLAGGED or unknown with the reasons behind each verdict, plus counts of checked, flagged, and incomplete links. A verdict of unknown means nothing is known against the link; this tool never reports a link as safe. | Read-only |
| check_wallet | Returns a read-only risk assessment of a cryptocurrency wallet address. It never moves funds or initiates transactions. Provide `address`; the chain (EVM, Solana, TON, or Bitcoin) is detected from the address format automatically. Returns a risk level of CRITICAL, HIGH, MEDIUM, LOW, or unknown, with the specific sanctions, scam, drainer, and phishing flags behind it. A verdict of unknown means nothing is known against the address; it does not mean the address is safe. | Read-only |
Change history
- check_wallet: input schema changed
- check_link: input schema changed
- check_email: input schema changed
- check_breach: input schema changed
- server instructions changed (+"RelayShield free threat-intelligence checks: screen links, wallets, emails, and data breaches. No API key is needed for the link, wallet, and email checks. Skill: the RelayShield MCP Proxy Firewall skill is served by this server at skill://relayshield-mcp-proxy-firewall/SKILL.md via the io.modelcontextprotocol/skills extension (skills/list and skills/get), and as a file at https://raw.githubusercontent.com/relayshield/relayshield-mcp/main/skills/relayshield-mcp-proxy-firewall/SKILL.md. Use it when an agent routes wallet MCP calls through the RelayShield MCP Proxy Firewall, or when setting up that routing for Coinbase Wallet MCP or MetaMask.")
| Source | Listing | First seen | Last seen | Versions |
|---|---|---|---|---|
| Official MCP Registry | io.github.nzdsf2-gif/relayshield-free-mcp | 2 Oct 2026 | 11 Nov 2026 | 1 |