LayerCall
mcp remote · streamable-http · v1.0.0 · source: crawl
https://www.layercall.com/api/mcp
https://github.com/LayerCall/layercall-sdk
Score an IP, email, phone, domain or device for fraud in one call, with the signals behind it.
Works
100
Verified Oct 31, 2026 · p50 589 ms · p95 741 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'layercall' |
| tools_listed | 15 | pass | 7 tools |
| schema_complete | 15 | pass | 7 of 7 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 589 ms |
| latency_p95 | 5 | pass | p95 741 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (7)
| Name | Description | Schema |
|---|---|---|
score_ip | Risk-score an IPv4 or IPv6 address. Detects commercial VPNs (naming the provider where its own published list confirms it), proxies, Tor exit nodes and datacenter hosting, and returns geolocation, ASN | typed |
verify_email | Check an email for syntax, MX records, disposable/throwaway providers, role accounts (info@, admin@), homograph lookalikes and domain age. Returns a 0-100 risk score and an allow/review/block verdict. | typed |
lookup_phone | Validate a phone number worldwide against its national numbering plan. Returns E.164, country, line type (mobile/fixed/VoIP/toll-free/premium) and a risk score. Works globally, not US-only. | typed |
score_domain | Profile a domain: registration date from RDAP, registrar, MX/SPF/DMARC configuration, disposable-mail and risky-TLD detection. newly_registered is null when the age genuinely could not be determined — | typed |
score_device | Judge a browser fingerprint from /fp.js: headless detection, automation frameworks (Selenium, Puppeteer, Playwright), timezone-versus-IP mismatch and repeat-device history. Note the ceiling honestly — | typed |
verify_agent | Cryptographically verify a Web Bot Auth signature (RFC 9421) — proof of WHICH agent is calling, not a guess from the user-agent. Returns verified true/false plus the agent's identity and declared purp | typed |
score_user | Score an entire signup in one call — any combination of IP, email, phone and domain — returning a single weighted risk score, a verdict, and the top contributing signals. A hard block on any component | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/com-layercall-trust-api)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.