# VerifyLite Muse connector

From musedirectory.ai, the independent directory of Meta Muse connectors. Not affiliated with Meta.

## VerifyLite

Check if a website is safe before you visit, click, or buy from it.

- Record: https://musedirectory.ai/connector/verifylite
- Category: Research & Data
- Developer: SecondShotAI (https://verifylite.hydratinghealingtouch.workers.dev)
- Muse status: Extra setup. Not in Muse's Connectors list yet. Muse can still use it: its page gives you a request to paste into Muse.
- Health: Working, 277ms, checked 2026-10-29T18:16:22Z
- Endpoint: https://verifylite.hydratinghealingtouch.workers.dev/mcp
- Auth: No account needed; Pricing: unknown
- Screening: Screened, no issues found (2026-10-29T18:16:22Z)
- Source: Found in the official MCP Registry (io.github.SecondShotAI/verifylite) https://registry.modelcontextprotocol.io/v0/servers?search=io.github.SecondShotAI%2Fverifylite

Screens URLs for security issues like invalid TLS, redirect chains, mixed content, and insecure forms. Can check single sites or batch multiple URLs. Includes optional Google Web Risk lookup for malware and phishing. Paid per check via USDC on Base.

Example request: "Check if this link in my email is safe before I click it."

How to connect: Not in Muse's Connectors list yet, but Muse can still use it. Paste this into Muse: "Use VerifyLite to help me. It is a free service with an MCP server at https://verifylite.hydratinghealingtouch.workers.dev/mcp. It does not need an API key. Ask me before you share anything with it." Muse asks before it shares anything with the app's site. Meta does not review apps used this way, so only use ones you trust. We tested this in the Muse app on September 24, 2026: Muse used an app's link directly this way and returned a live answer.

Tools:
- list_prices: Lists every VerifyLite tool and its current price. Free.
- verify_url: URL syntax validator. Takes one absolute HTTP or HTTPS URL and returns its normalized form, or a specific error code: unparseable, unsupported scheme, embedded credentials, IP literal, or local/metadata hostname. Never contacts the destination, so it is fast and side-effect free.
- check_site_safety: Website safety check for one URL. Passively fetches the site and returns a verdict (safe, caution, unsafe), a 0-100 score, and evidence-backed flags: TLS validity, HTTP-to-HTTPS redirect, redirect chain and offsite redirects, security headers, mixed content, insecure forms, and d
- check_site_safety_pro: Website safety check plus a Google Web Risk lookup for malware, phishing, and unwanted software. Includes the full /safe report: verdict (safe, caution, unsafe), 0-100 score, TLS, redirects, security headers, mixed content, insecure forms, and domain age. A blocklist hit makes th
- check_sites_batch: Batch website safety check: the full /safe report for several URLs in one call, priced per site and cheaper than single checks. Each result has a verdict (safe, caution, unsafe), a 0-100 score, and evidence-backed flags for TLS, redirects, security headers, mixed content, insecur

Screening checks:
- MCP handshake: pass (Answered in 277ms)
- Domain against threat feeds (Cloudflare security DNS): pass (verifylite.hydratinghealingtouch.workers.dev not flagged)
- Published packages against the OSV malicious-package database: n/a (No npm or PyPI package published)
- Hidden instructions or invisible characters in tool text: pass (5 tools read, nothing found)
- Inputs asking for passwords, card numbers or seed phrases: pass (None found)
- Domain and redirects: pass (No redirects off the domain)
- AI review of purpose and tool behavior: pass (No concerns)