Bewary is a scam detection API and MCP server for apps and AI agents: check links, domains, phone numbers, emails, crypto wallets and IBANs for phishing and fraud, with the evidence behind each verdict.
A startup from Cheyenne, the United States.
This page is designed to help you find out whether Bewary is good and if it is the right choice for you.
Bewary is a scam detection API and MCP server for apps and AI agents. Send a link, domain, IP address, phone number, SMS short code, email address, crypto wallet, IBAN, mobile app or payment handle and get back a typed verdict (scam, suspicious, safe or unknown), the probability that it is a scam, the facts behind it and reason codes your code can branch on. Unknown is never safe.
What each lookup answers
Verdicts come from evidence, not a language model: phishing and malware feeds, FTC Do Not Call and FCC complaints, CERT Polska, OFAC, certificate transparency logs and Bewary's own DNS history, read hourly or daily.
How to use it
npx bewary, with --fail-on for CI.A free key gets 1,000 credits a month with no card. Prepaid credit packs start at $20 and never expire.
Listed in
Phishing URL check
Resolves shorteners and redirects, then checks the destination domain's age, brand imitation and phishing and malware feeds.
Domain age and lookalike detection
Registration date, registrar, lookalike-brand technique, abused TLD and blocklist status for any domain.
Phone number scam lookup
Country, number type and the FTC and FCC complaints filed about a phone number: counts, dates and subjects.
SMS short code lookup
Who operates a US SMS short code, and whether it is legitimate, shared or a scam code.
Disposable email detection
Disposable or free provider, role mailbox and the sender domain's facts for an email address.
Crypto wallet screening
Scam reports, OFAC sanctions and Tether and Circle freezes for Bitcoin, Ethereum, Tron and other wallets.
MCP Server
Remote MCP server with 15 tools for Claude, ChatGPT, Cursor and VS Code, with OAuth sign-in or an API key.
Bulk feeds and watches
Scam domain list as CSV, DNS RPZ, STIX 2.1 and TAXII 2.1, rebuilt hourly; watches send events when an entity changes.
The API launched on 1 November 2026, and there are no customers to name yet.
Bewary started as a consumer scam checker. The engine behind it, built on public complaint data, threat feeds, certificate transparency logs and its own DNS history, turned out to be what businesses and AI agents need, so since November 2026 Bewary is an API, an MCP server and a CLI.
Bewary answers from evidence, not from a language model. Each lookup returns a verdict (scam, suspicious, safe or unknown), the probability that it is a scam, the facts behind it and reason codes your code can branch on, and unknown is never safe. One key covers links, domains, IP addresses, phone numbers, SMS short codes, email addresses, crypto wallets, IBANs, mobile apps and payment handles, through a REST API, a remote MCP server for AI agents and a CLI.
One key and one typed response format cover ten kinds of input, so an app or an agent does not stitch together a URL API, a phone API and a wallet screening service. Bewary also answers questions few APIs do: which company operates a US SMS short code, the FTC and FCC complaints behind a phone number, and whether Tether or Circle froze a wallet. Commercial use is allowed, and a free key gets 1,000 credits a month with no card.
Developers who add a link, phone number or email check to an app; builders of AI agents that need to check a link, number or payment before acting; trust and safety and fraud teams screening sign-ups, sellers and payouts; and security teams loading a scam domain feed into a DNS resolver or a threat intelligence platform.
Python with FastAPI and PostgreSQL behind the API, a remote MCP server over streamable HTTP with OAuth 2.1 sign-in, a Node.js CLI published on npm as bewary, and an Astro website.
We have collected here some useful links to help you find out if Bewary is good.
Check the traffic stats of Bewary on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of Bewary on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of Bewary's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of Bewary on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about Bewary on Reddit. This can help you find out how popualr the product is and what people think about it.
Do you know an article comparing Bewary to other products?
Suggest a link to a post with product alternatives.
Is Bewary good? This is an informative page that will help you find out. Moreover, you can review and discuss Bewary here. The primary details have been verified within the last quarter. So they could be considered up to date. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
