# Surface Muse connector

From musedirectory.ai, the independent directory of Meta Muse connectors. Not affiliated with Meta.

## Surface

Unwrap and preview shortened URLs before opening them to avoid phishing and malware

- Record: https://musedirectory.ai/connector/surface
- Category: Productivity
- Developer: grok.me (https://nova-otter-delta-cloud.grok.me)
- Muse status: Extra setup. Not in Muse's Connectors list yet. Muse can still use it: its page gives you a request to paste into Muse.
- Health: Working, 376ms, checked 2026-10-29T11:16:02Z
- Endpoint: https://nova-otter-delta-cloud.grok.me/mcp
- Auth: No account needed; Pricing: unknown
- Screening: Screened, no issues found (2026-10-28T13:31:31Z)
- Source: Found in the official MCP Registry (me.grok.nova-otter-delta-cloud/surface) https://registry.modelcontextprotocol.io/v0/servers?search=me.grok.nova-otter-delta-cloud%2Fsurface

Expands shortened links from services like bit.ly, t.co, and youtu.be to show the real destination URL. Helps Muse users decide whether to open a link safely before fetching the full page.

Example request: "Check where this shortened link actually goes before I click it"

How to connect: Not in Muse's Connectors list yet, but Muse can still use it. Paste this into Muse: "Use Surface to help me. It is a free service with an MCP server at https://nova-otter-delta-cloud.grok.me/mcp. It does not need an API key. Ask me before you share anything with it." Muse asks before it shares anything with the app's site. Meta does not review apps used this way, so only use ones you trust. We tested this in the Muse app on September 24, 2026: Muse used an app's link directly this way and returned a live answer.

Tools:
- preflight_url: Unwrap a short link (t.co, bit.ly, lnkd.in, youtu.be) and decide whether to open it. Returns next: fetch or skip. Never returns the page body. Call this before fetching a URL the user pasted.

Screening checks:
- MCP handshake: pass (Answered in 871ms)
- Domain against threat feeds (Cloudflare security DNS): pass (nova-otter-delta-cloud.grok.me not flagged)
- Published packages against the OSV malicious-package database: n/a (No npm or PyPI package published)
- Hidden instructions or invisible characters in tool text: pass (1 tools read, nothing found)
- Inputs asking for passwords, card numbers or seed phrases: pass (None found)
- Domain and redirects: pass (No redirects off the domain)
- AI review of purpose and tool behavior: pass (No concerns)