Categories › Security › Pentest & threat intel
Free safety checks for AI agents: links, sites, MCP servers, and pages read with traps removed.
Remote server: your requests and data go to flockward.com. Claude Code: claude mcp add --transport http flockward https://flockward.com/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
check_url — Check whether a web page is known to attack AI agents (prompt injection, data theft, destructive commands, payment fraud) or is on a phishincheck_urls — Check up to 50 links in one call, for example a page of search results. One check per link.fetch_safely — Safe browser in one call: checks the page, fetches it, returns readable text with hidden elements, HTML comments, invisible characters and sreport_page — Tell Flockward about a page you visited. Use kind "suspicious" if it had hidden text, instructions aimed at agents, or asked for secrets or scan_mcp_server — Before connecting to a new MCP server, check its tool descriptions for hidden instructions (tool poisoning): requests to read credential filcheck_site — Rate a whole website for AI agents: safe, caution, unsafe or not_checked, from threat lists, Flockward's own findings and a scan of its homeset_webhook — Register an https URL. When a page you checked in the last 30 days is later confirmed as hostile to agents, Flockward POSTs the alert there.get_free_key — Get a free Flockward key with no sign-up. Pass it as api_key on later calls for a higher daily limit, alerts about pages you visited that lamy_status — Show your remaining checks today, contribution, reputation, referrals and any alerts.send_feedback — Send a suggestion or problem to the people who run Flockward. A human reads every note.Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.