io.github.mrfentmen/urlhaus-mcp

urlhaus-mcp

Is the io.github.mrfentmen/urlhaus-mcp MCP server down? No. It answered initialize and tools/list in the probe of 2026-10-27.

Query URLhaus: recent malicious URLs, URL lookup, payload lookup by SHA256, tag search.

alive probed 2026-11-15 · unchanged since 2026-10-27

4tools

510tokens in Claude Opus 5.5

0.3 %of Claude's 200k window

0.2×the median server

388 msto initialize

9 msto list tools

Run it: npx -y urlhaus-mcp@1.0.0 (stdio, probed in a container with the network off)
Host: npmjs.com
Reports itself as: urlhaus-mcp 1.0.0
Capabilities: tools
Instructions: none
Of a 1M window: <0.1 % of a 1M context window
Count: 510 tokens in Claude Opus 5.5, exact, measured 2026-10-27. With the Claude Code prefix mcp__…__ on each tool name: 566. The o200k_base estimate is 268. Counted again when the tool definitions change. Method.
Repository: https://github.com/mrfentmen/premium-mcps
Registry: active, updated 2026-10-17 · registry entry
Changes: 2 recorded, reachable in 2 of them. A row is added when the result, the tool count or the cost changes.

Most expensive tools

The Claude column scales the o200k estimate of each tool by this server's ratio of exact to estimate, 1.90×.

Tool	≈ Claude tokens	o200k estimate	Share of this server
search_tag	147	77	29 %
lookup_payload	124	65	24 %
recent_urls	122	64	24 %
lookup_url	118	62	23 %

Other registry entries on npmjs.com, the ones next to this name; all of them.

Servers that mention urlhaus or malicious or payload.

Urlhaus io.github.pipeworx-io/urlhaus · alive
app.vercel.cloakcheck-wheat/cloakcheck · alive
com.aiwebsitepipeline/indexnow-toolkit · alive
Dependency Vulnerability Tracker — package security advisories ($0.01/query) com.a2awire/data-dependency-vulnerability-malicious-package-security · alive
ChargerDojo com.chargerdojo/ocpi · alive
com.clauxel.tracepiishield/tracepiishield-mcp · no DNS
Austin Oaks Payload Rescue com.freshypenguin/ao-payload-rescue · not found
Galley Render com.galleyrender/galley-render · no DNS

We add a row when the result changes. A server with no change keeps its last row.

Probed	Result	Init	Tools	Claude	o200k
2026-10-27 06:58	alive	254 ms	4	510	268
2026-10-20 06:43	alive	388 ms	4		268

The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.

Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.