Prototype · Preview: every server in the official registry, synced every 30 minutes. Reviews and accounts come in a later step.
PopNx MCPMCP servers for people who use AI · explained in plain words

Jobverify

by yessGlory17version 0.1.0i★ –iRuns on your computer
Registry nameio.github.yessGlory17/jobverify

Install

Overview

Description from the maker (original English)

Detect fake-recruiter and job-offer scams using free OSINT. No API keys.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

  • Connection: Runs on your computer
  • Transport: stdio
  • Category: Cybersecurity

Install

Pick the AI app you use, then copy the settings.

Before you install

  • Basic checks: 1 of 1 passed
  • Runs on your computer with your user’s permissions (files, network, apps).
  • The registry lists no key to fill in.

You need

  • PyPIPython’s uv installed (for the uvx command)

Which app do you use?

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "jobverify": {
      "command": "uvx",
      "args": [
        "jobverify-mcp"
      ]
    }
  }
}

Run this in your terminal

claude mcp add jobverify -- uvx jobverify-mcp

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "jobverify": {
      "command": "uvx",
      "args": [
        "jobverify-mcp"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "jobverify": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "jobverify-mcp"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified with the GitHub account yessGlory17, which owns the repo

  • … Not checked yet

    Still maintained

    We have not read this repo from GitHub yet

  • … Not checked yet

    Has a licence

    We have not read this repo from GitHub yet

  • – Not applicable

    Endpoint responds

    This one runs on your computer; there is no internet endpoint

  • – Not applicable

    Sign-in with OAuth

    Runs on your computer and uses local settings instead

  • … Not checked yet

    No hidden instructions in tool descriptions

    Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Cybersecurityi

  • More stars than 0% of the other 994 servers in this category
  • Published to the registry more recently than 25% of the other 994 servers in this category
  • Basic checks equal to or better than 100% of the other 994 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Jobverify safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (0.1.0) reached the registry 4 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Python (uv) on your computer.

What can I use instead?

In the same category: SML Risk Firewall, ipdata MCP by usefulapi, MaxMind minFraud MCP by usefulapi

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

SML Risk Firewall

by scriptmasterlabs.com

Pre-trade risk checks for agent trades: orders vs your limits, signed receipts.

Runs in the cloudUpdated today
Install

Look up location, network, company and threat data for IP addresses and ASNs in ipdata.

Runs in the cloudUpdated today
Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Check whether a recruiter or job offer is real — before you reply.


You get a message: *"We loved your profile and want to offer you a great remote job."* It sounds real. The company has a logo. The recruiter has a photo. But something feels off.

JobVerify helps you find out — in seconds — whether it's genuine or a scam.

You paste the recruiter's message (or a company name, a link, or an email) and ask your AI assistant. JobVerify quietly runs the same background checks a professional investigator would, then gives you a plain-English answer: looks legit, be careful, or this is almost certainly a scam — and *why*.


❌ Without JobVerify

Fake recruiter and job-offer scams are everywhere, and they're convincing. On your own, you're left guessing:

  • ❌ Is this company real, or a name someone invented last week?
  • ❌ Is this "recruiter" a real person, or a stolen photo and a throwaway account?
  • ❌ Is that application link safe, or a look-alike site built to steal your data?
  • ❌ Why are they asking me to pay for equipment, or move the chat to WhatsApp/Telegram?

By the time you notice, your time, your personal details — or your money — may already be gone.

✅ With JobVerify

JobVerify cross-checks the offer against dozens of free, public information sources and combines the clues into one clear verdict:

  • ✅ Tells you if the company is a registered, real business — or nowhere to be found
  • ✅ Spots classic scam scripts (upfront fees, fake "task" jobs, crypto, "let's move off-platform")
  • ✅ Flags suspicious links, look-alike domains, and brand-new websites made to look official
  • ✅ Checks whether the email, phone, and photos actually belong to who they claim
  • ✅ Explains its reasoning in everyday language, so you can decide with confidence

No account, no sign-up, and none of your data is sold or stored. It simply helps you not get fooled.


🕵️ How it works

You don't need to learn anything technical. It's a three-step conversation:

  1. Paste it. Drop the recruiter's message, a company name, a job link, or an email into your AI chat.
  2. It investigates. JobVerify pulls out every detail — the company, links, email, phone, wallet addresses — and quietly checks each one against public records, scam databases, and website history.
  3. You get a verdict. A short, honest summary: how risky it looks, which signals are reassuring, which are red flags, and what to do next.

[!NOTE]

JobVerify never logs into or scrapes LinkedIn. It only looks at information that is already

public, and reads website history through the Internet Archive — the safe, legal way to check

how long a profile or company page has *really* existed (scammers rely on brand-new throwaway accounts).


🔎 What it looks at

Think of it as a checklist a careful friend — who happens to be a fraud investigator — would run for you:

AreaThe question it answers
The messageDoes this match known scam playbooks (advance fees, fake tasks, crypto, urgency)?
The companyIs it a real, registered business? Any recent scam reports? Is the office address real?
The personIs the email real and deliverable? Is the phone valid? Are the photos/usernames reused elsewhere?
The linksIs the domain brand-new? A look-alike of a real brand? On any phishing/malware blocklist?
The moneyIs the crypto wallet they gave you already flagged in scam databases?
The historyHow long has this profile or website *actually* been online?

💬 Example

Ask your assistant something as simple as:

Is this recruiter legit?

"Hi! I'm a talent partner at Example Corp. We loved your profile and want to offer you a remote role at $45/hr. To get started, please purchase $200 of onboarding equipment through this link — you'll be fully reimbursed on day one. Let's continue on Telegram: @examplecorp_hr"

JobVerify will pick out Example Corp, the link, and the Telegram hand-off, check each one, and reply with something like: *"⚠️ High risk — the company has no public registration, the link was registered 4 days ago, and asking you to pay upfront and move to Telegram are textbook scam signals."*


🚀 Getting started

No cloning. No virtualenv. No manual install. JobVerify runs straight from GitHub — you only paste a few lines into your AI assistant's config, and it fetches and launches itself on demand.

[!NOTE]

The only thing you need once is uv — a tiny, free helper that runs

the tool for you:

- macOS / Linux: curl -LsSf https://astral.sh/uv/install.sh | sh

- Windows: powershell -c "irm https://astral.sh/uv/install.ps1 | iex"

Claude Desktop

Add this to your claude_desktop_config.json, then restart Claude:

{

"mcpServers": { "jobverify": { "command": "uvx", "args": ["jobverify-mcp"] } } }

Claude Code

One line in your terminal:

claude mcp add jobverify -- uvx jobverify-mcp

The first run takes a few seconds while it downloads the tool; after that it's instant.

Use it

Paste a suspicious message and ask *"Is this offer legit?"* — or run the built-in `analyze` prompt. That's it.


🔐 Privacy & honesty

  • Your data stays yours. No sign-up, no tracking, nothing you paste is stored or sold.
  • No API keys or costs. Every source is free and open — public business registries, DNS records, scam blocklists, the Internet Archive, and more.
  • Signals, not certainty. JobVerify gives you strong decision support, not a courtroom verdict. Treat the result as informed guidance about a *message* — never as a final judgment about a real person.

For the curious: the full toolbox

Under the hood, the AI assistant orchestrates these individual checks (all free, no keys):

ToolWhat it checks
extract_entitiesPulls emails, links, phones, wallets, and profile URLs out of a message
check_scam_patternsMatches text against known scam tactics
check_email / check_email_footprintEmail deliverability + linked social accounts
check_domain / check_domain_authDomain age, registrar, and whether it can be spoofed
check_typosquatting / find_lookalike_domainsLook-alike / imposter domains
check_url / check_ipPhishing & malware blocklists
check_certificate_transparencyA site's certificate & subdomain history
parse_email_headersOrigin, SPF/DKIM/DMARC, and mismatches in raw email headers
check_phonePhone number validity and region
check_crypto_addressKnown-scam crypto wallet databases
verify_company / search_company_news / verify_addressBusiness registration, press, and real address
check_github_org / check_usernameWhether an org/username really exists and how old it is
check_wayback / fetch_archived_pageInternet Archive history & content (the legal way to read a page)

There's also a single `analyze` prompt that runs the whole extract → check → verdict flow for you.


⚠️ Disclaimer

JobVerify is a decision-support tool. Its signals are probabilistic and may be incomplete or wrong. Always use your own judgment, and never treat a result as a definitive statement about any individual or organization.

License

MIT — use it, share it, and help people stay safe.

Ask PopNx