Unphurl MCP Server: Install & Setup

Install Unphurl in Claude Code

Remote URL

Claude Code

claude mcp add --transport http unphurl https://mcp.unphurl.com/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "unphurl": {
      "url": "https://mcp.unphurl.com/mcp"
    }
  }
}

npm

Claude Code

claude mcp add unphurl -e UNPHURL_API_KEY=... -- npx -y @unphurl/mcp-server

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "unphurl": {
      "command": "npx",
      "args": [
        "-y",
        "@unphurl/mcp-server"
      ],
      "env": {
        "UNPHURL_API_KEY": "..."
      }
    }
  }
}

Replace each ... with your own value.

Frequently asked questions

What does the Unphurl MCP server do?

URL security signals: redirects, brand impersonation, domain age, SSL validation, parked-domain detection, structural analysis and DNS enrichment.

Is the Unphurl MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does Unphurl run locally or remotely?

Local + Remote. Can run locally or be used as a hosted remote server.

How do I add Unphurl to Claude Code?

Run: claude mcp add --transport http unphurl https://mcp.unphurl.com/mcp

More security & identity MCP servers

View all

Volta Notes

iamredmh/volta-mcp-server

Burn-after-read encrypted Volta Notes for agents: hand off credentials between users and agents without secrets appearing in chat history.

LocalAccount neededTypeScript

Umbra

elberacasa/umbra

Trust scores and guardrails for AI-generated code: static security rules, Docker-verified build/boot checks and receipts that catch agents lying about tests.

LocalFreeTypeScript

AW-1 Sovereign Circuit Breaker

MvikManners/aw1-circuit-breaker

Deterministic sub-0.2ms AST security circuit breaker and proxy for MCP tool call dispatch pipelines.

Local + RemoteAccount neededPython

Securecode

juanisidoro/securecode-mcp

Encrypted secrets vault for Claude Code that injects secrets into local files so the AI never sees raw values, with audit logs and per-model access rules.

LocalAccount neededTypeScript

Dcl Webhook

Fronesis-Labs/dcl-webhook

Deterministic audit layer that checks LLM and agent outputs against jailbreak, safety and trading compliance policies and logs verdicts to a hash chain.

RemoteAccount neededPython

Secobserve

nh4ttruong/secobserve-mcp

SecObserve vulnerability and license management: triage observations, manage products and rules, import scan reports and SBOMs, run scans and generate VEX.

LocalAccount neededPython