PreClick

PreClick is a URL security scanner and MCP server that enables AI agents and any client to analyze URLs for phishing, malware, and other security threats before navigation. Use it as a standalone URL scanner via the client libraries below, or connect directly via the MCP protocol.

The fastest way to add URL security scanning to any AI agent, automation pipeline, or application. These standalone URL scanner clients handle connection, polling, and error recovery out of the box — no MCP protocol knowledge or conformance required:

Both libraries provide a simple scan-oriented URL security scanning API (scan(url)/scanWithIntent(url, intent)) that returns results directly — phishing detection, threat analysis, and intent alignment in a single call. No protocol vocabulary, noconnect()boilerplate, no manual polling for the common case.

This tool is intended for authorized security assessment only. Use it solely on systems or websites that you own or for which you have got explicit permission to assess. Any unauthorized, unlawful, or malicious use is strictly prohibited. You are responsible for ensuring compliance with all applicable laws, regulations, and contractual obligations.

- Pre-flight URL validation for AI agents
- Automated URL security scanning in workflows
- Malicious link detection in emails/messages

Trial (hosted, up to 100 requests/day without API key):

{ "mcpServers": { "preclick-mcp": { "transport": "streamable-http", "url": "https://preclick.ai/mcp" } } }

Authenticated (recommended for stable and higher-volume usage):

{ "mcpServers": { "preclick-mcp": { "transport": "streamable-http", "url": "https://preclick.ai/mcp", "headers": { "X-API-Key": "YOUR_API_KEY" } } } }

2. Optional: Initialize Session (stateful mode only)

Default hosted usage is stateless. Clients send JSON-RPC messages withPOST /mcp. Some Streamable HTTP clients may also probeGET /mcpfor an SSE stream. On the stateless hosted deployment,/mcpdoes not offer an SSE stream and returns HTTP405 Method Not Allowed. Clients should treat405as "no SSE stream on this endpoint" and continue usingPOST /mcp.

Clients should still send the standard MCP HTTP headers:

- Accept: application/json, text/event-streamon POST
- MCP-Protocol-Versionon all non-initialize requests

The hosted deployment currently normalizes missing or incomplete POSTAcceptheaders for compatibility. It also allows missingMCP-Protocol-Versionon discovery-only POST list requests (tools/list,resources/list,prompts/list) for registry compatibility. Clients should not rely on either behavior.

# Only required if the server is running in stateful mode curl -X POST https://preclick.ai/mcp \ -H "Content-Type: application/json" \ -H "Accept: application/json, text/event-stream" \ -H "X-API-Key: YOUR_API_KEY" \ -d '{ "jsonrpc": "2.0", "id": 1, "method": "initialize", "params": { "protocolVersion": "2025-06-18", "capabilities": {}, "clientInfo": {"name": "my-client", "version": "1.0"} } }' # Response includes Mcp-Session-Id header - save it for subsequent requests

url_scanner_scansupports two execution modes (the same modes apply tourl_scanner_scan_with_intent):

- Task-augmented (recommended): Include thetaskparameter for async execution
- Direct: Omit thetaskparameter for synchronous execution

curl -X POST https://preclick.ai/mcp \ -H "Content-Type: application/json" \ -H "Accept: application/json, text/event-stream" \ -H "MCP-Protocol-Version: 2025-06-18" \ -H "X-API-Key: YOUR_API_KEY" \ -d '{ "jsonrpc": "2.0", "id": 2, "method": "tools/call", "params": { "name": "url_scanner_scan", "arguments": { "url": "https://example.com" }, "task": { "ttl": 720000 } } }' # If stateful mode is enabled, include: -H "Mcp-Session-Id: YOUR_SESSION_ID"

{ "jsonrpc": "2.0", "id": 2, "result": { "task": { "taskId": "550e8400-e29b-41d4-a716-446655440000", "status": "working", "statusMessage": "Queued for processing", "createdAt": "2026-01-18T12:00:00Z", "lastUpdatedAt": "2026-01-18T12:00:00Z", "ttl": 720000, "pollInterval": 2000 } } }

Optional: Provide an url visiting intent for additional context (recommended but not required):

curl -X POST https://preclick.ai/mcp \ -H "Content-Type: application/json" \ -H "Accept: application/json, text/event-stream" \ -H "MCP-Protocol-Version: 2025-06-18" \ -H "X-API-Key: YOUR_API_KEY" \ -d '{ "jsonrpc": "2.0", "id": 3, "method": "tools/call", "params": { "name": "url_scanner_scan_with_intent", "arguments": { "url": "https://example.com", "intent": "Book a hotel room" }, "task": { "ttl": 720000 } } }'

Recommendation: Useurl_scanner_scan_with_intentwhen you can state your purpose (login, purchase, booking, payments, file download) so intent/content mismatch can be considered as an additional signal. Otherwise useurl_scanner_scan. Max intent length: 248 characters. Low-information or instruction-like intent strings are treated as not provided. Result includesintent_alignment(misaligned,no_mismatch_detected,inconclusive, ornot_provided).no_mismatch_detectedis only returned when intent analysis had sufficient evidence; if intent analysis is unavailable or evidence is limited, result isinconclusive. Whenintent_alignmentismisalignedand confirmed by successful high-confidence analysis, the response directive isDENYwith reasonintent_inconsistent_destination(policy gate; risk score is unchanged). When high-confidence analysis confirms an unverified high-impact service claim with weak identity corroboration in a low-confidence context, the response directive is alsoDENYwith reasoninsufficient_service_verification(policy gate; risk score is unchanged). In additional contextual low-evidence policy cases, responses may returnDENYwith reasons such asinsufficient_service_verificationorinsufficient_trust_signals(policy gate; risk score is unchanged).

Direct-call timeout note: synchronous tool calls use a bounded server wait window sized for direct-only clients (hosted default 90s). If timeout is reached, the server returns JSON-RPC-32603witherror.data.taskIdanderror.data.pollIntervalso you can continue viatasks/get/tasks/result.

Compatibility note: if your MCP client cannot call native Tasks methods (tasks/get/tasks/result), useurl_scanner_async_scanorurl_scanner_async_scan_with_intentto submit work and then poll withurl_scanner_async_task_status/url_scanner_async_task_result. Call these compatibility tools as ordinary tools only; do not include a native MCPtaskparameter.

tasks/resultuses a shorter hosted blocking wait (default 30s). If this wait is exceeded, the server returns JSON-RPC-32603witherror.data.taskIdanderror.data.pollInterval. Native Tasks clients should prefer polling withtasks/getuntil status iscompleted, then calltasks/resultto retrieve the final result immediately.

curl -X POST https://preclick.ai/mcp \ -H "Content-Type: application/json" \ -H "Accept: application/json, text/event-stream" \ -H "MCP-Protocol-Version: 2025-06-18" \ -H "X-API-Key: YOUR_API_KEY" \ -d '{ "jsonrpc": "2.0", "id": 3, "method": "tasks/result", "params": { "taskId": "550e8400-e29b-41d4-a716-446655440000" } }' # If stateful mode is enabled, include: -H "Mcp-Session-Id: YOUR_SESSION_ID"

Response (completed task — CallToolResult shape, same as synchronoustools/call):

Authentication requirements depend on deployment mode:

- Hosted endpoint (https://preclick.ai/mcp): API key is optional for up to 100 requests/day.
- Hosted endpoint above trial quota: API key required.

Chia Health MCP Server — Patient workflow integration for a licensed US telehealth platform. Browse GLP-1 medications (semaglutide, tirzepatide), peptide therapies (sermorelin, NAD+, glutathione), and longevity treatments. Check eligibility, complete intake, sign consents, and manage treatment plans. 30 tools, HIPAA-compliant. All prescriptions evaluated by licensed US healthcare providers and delivered from FDA-regulated pharmacies across 50 states + DC.

Broker + MCP server for last-bidder-wins games on Solana — agents register, auto-fund a Privy wallet, and bid via streamable HTTP

AI-powered no-code app builder with 17 MCP tools — create projects, generate pages from natural language, AI text/image generation (GPT, Claude, Gemini, 14+ models), page CRUD, workflow execution, publish & version control. SSE transport, API key auth.

An mcp server for your food ordering needs.

Agent-to-Agent handoff certification for multi-agent systems — validates context preservation, verifies agent capabilities before handoff, logs transfer chains, and ensures no data loss in agent orchestration.

Unified MCP & skill management gateway with progressive disclosure. Manages multiple MCP servers as Agent Apps, loading tool schemas on demand for 99% context token savings. Shared across Claude Code, Codex, OpenCode and more.

A collection of Model Context Protocol (MCP) servers for various tasks and integrations, supporting both Python and Node.js environments.

Open-souSecurely feeds real security refreshed rules into Cursor, Claude Code, and Windsurf — zero config, no API key.

Health intelligence MCP — access biomarkers, biological age, and personalized longevity action plans from your Aniva profile.