Are you the author? Sign in to claim
Detect fake recruiter & job-offer scams with free OSINT — an MCP server for Claude. No API keys.
Check whether a recruiter or job offer is real — before you reply.
You get a message: "We loved your profile and want to offer you a great remote job." It sounds real. The company has a logo. The recruiter has a photo. But something feels off.
JobVerify helps you find out — in seconds — whether it's genuine or a scam.
You paste the recruiter's message (or a company name, a link, or an email) and ask your AI assistant. JobVerify quietly runs the same background checks a professional investigator would, then gives you a plain-English answer: looks legit, be careful, or this is almost certainly a scam — and why.
Fake recruiter and job-offer scams are everywhere, and they're convincing. On your own, you're left guessing:
By the time you notice, your time, your personal details — or your money — may already be gone.
JobVerify cross-checks the offer against dozens of free, public information sources and combines the clues into one clear verdict:
No account, no sign-up, and none of your data is sold or stored. It simply helps you not get fooled.
You don't need to learn anything technical. It's a three-step conversation:
[!NOTE] JobVerify never logs into or scrapes LinkedIn. It only looks at information that is already public, and reads website history through the Internet Archive — the safe, legal way to check how long a profile or company page has really existed (scammers rely on brand-new throwaway accounts).
Think of it as a checklist a careful friend — who happens to be a fraud investigator — would run for you:
| Area | The question it answers |
|---|---|
| The message | Does this match known scam playbooks (advance fees, fake tasks, crypto, urgency)? |
| The company | Is it a real, registered business? Any recent scam reports? Is the office address real? |
| The person | Is the email real and deliverable? Is the phone valid? Are the photos/usernames reused elsewhere? |
| The links | Is the domain brand-new? A look-alike of a real brand? On any phishing/malware blocklist? |
| The money | Is the crypto wallet they gave you already flagged in scam databases? |
| The history | How long has this profile or website actually been online? |
Ask your assistant something as simple as:
Is this recruiter legit?
"Hi! I'm a talent partner at Example Corp. We loved your profile and
want to offer you a remote role at $45/hr. To get started, please purchase
$200 of onboarding equipment through this link — you'll be fully reimbursed
on day one. Let's continue on Telegram: @examplecorp_hr"
JobVerify will pick out Example Corp, the link, and the Telegram hand-off, check each one, and reply with something like: "⚠️ High risk — the company has no public registration, the link was registered 4 days ago, and asking you to pay upfront and move to Telegram are textbook scam signals."
No cloning. No virtualenv. No manual install. JobVerify runs straight from GitHub — you only paste a few lines into your AI assistant's config, and it fetches and launches itself on demand.
[!NOTE] The only thing you need once is uv — a tiny, free helper that runs the tool for you:
- macOS / Linux:
curl -LsSf https://astral.sh/uv/install.sh | sh- Windows:
powershell -c "irm https://astral.sh/uv/install.ps1 | iex"
Add this to your claude_desktop_config.json, then restart Claude:
{
"mcpServers": {
"jobverify": {
"command": "uvx",
"args": ["jobverify-mcp"]
}
}
}
One line in your terminal:
claude mcp add jobverify -- uvx jobverify-mcp
The first run takes a few seconds while it downloads the tool; after that it's instant.
Paste a suspicious message and ask "Is this offer legit?" — or run the built-in analyze prompt.
That's it.
Under the hood, the AI assistant orchestrates these individual checks (all free, no keys):
| Tool | What it checks |
|---|---|
extract_entities | Pulls emails, links, phones, wallets, and profile URLs out of a message |
check_scam_patterns | Matches text against known scam tactics |
check_email / check_email_footprint | Email deliverability + linked social accounts |
check_domain / check_domain_auth | Domain age, registrar, and whether it can be spoofed |
check_typosquatting / find_lookalike_domains | Look-alike / imposter domains |
check_url / check_ip | Phishing & malware blocklists |
check_certificate_transparency | A site's certificate & subdomain history |
parse_email_headers | Origin, SPF/DKIM/DMARC, and mismatches in raw email headers |
check_phone | Phone number validity and region |
check_crypto_address | Known-scam crypto wallet databases |
verify_company / search_company_news / verify_address | Business registration, press, and real address |
check_github_org / check_username | Whether an org/username really exists and how old it is |
check_wayback / fetch_archived_page | Internet Archive history & content (the legal way to read a page) |
There's also a single analyze prompt that runs the whole extract → check → verdict flow for you.
JobVerify is a decision-support tool. Its signals are probabilistic and may be incomplete or wrong. Always use your own judgment, and never treat a result as a definitive statement about any individual or organization.
MIT — use it, share it, and help people stay safe.
Run Claude Code as an MCP server so any agent can delegate coding tasks to it
Browser automation using accessibility snapshots instead of screenshots
Google's universal MCP server supporting PostgreSQL, MySQL, MongoDB, Redis, and 10+ databases
Official GitHub integration for repos, issues, PRs, and CI/CD workflows