Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

com.mcparmory/linkly

OCI · GHCR.IO/MCPARMORY/LINKLY:1.0.3 · 2 COMPONENTS

Create short links, manage domains, and track click analytics

0 this week 51 Trust /100

Last scanned (2 hours ago)

Scores higher than 81% of OCI servers

Category Marketing and SEO

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency32
Schema Quality & AI Usability70
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 3167 tokens (~175/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 1 Nov 26 0
    • Stability: 0.97 → pass security
  • 31 Oct 26 0
    • Stability: pass → 0.97 functional
  • 21 Oct 26 0
    • Stability: 0.97 → pass security
  • 20 Oct 26 0
    • Stability: pass → 0.97 functional
  • 17 Oct 26 +2
    • Stability: 0.83 → pass security
  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

  • 15 Oct 26 −3
    • Stability: pass → 0.80 functional
  • 14 Oct 26 0
    • Stability: 0.97 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed oci/ghcr.io/mcparmory/linkly:1.0.3

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem oci
Reason No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 18 exposed · ~3,167 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
add_domain_to_workspace ~70

Add a new custom domain to your workspace. Ensure DNS CNAME record configuration is completed before adding the domain.

NameTypeReqDescription
namestring–The name of the custom domain to add to your workspace.
workspace_idintegeryesThe unique identifier of the workspace where the domain will be added.

No output schema declared.

No examples provided.

add_domain_to_workspace_by_id ~91

Add a custom domain to a workspace. The domain must have a CNAME record configured in DNS before being added.

NameTypeReqDescription
namestringyesThe fully qualified domain name to add (e.g., links.example.com). Ensure the corresponding CNAME record is configured in your DNS provider before adding.
workspace_idstringyesThe unique identifier of the workspace where the domain will be added.

No output schema declared.

No examples provided.

create_or_update_link ~599

Create a new shortened link or update an existing one. Provide `url` and `workspace_id` to create; provide `id` and fields to update. Supports custom slugs, UTM parameters, tracking pixels, Open Graph metadata, and conditional redirect rules.

NameTypeReqDescription
block_botsboolean–Prevent automated bots and crawlers from accessing this link.
body_tagsstring–Custom HTML tags to inject into the page body for tracking or functionality purposes.
cloakingboolean–Enable URL cloaking to hide the destination URL from users and analytics.
deletedboolean–Mark the link as deleted. Set to true to soft-delete without removing the record.
enabledboolean–Enable or disable the link. Disabled links will not redirect.
fb_pixel_idstring–Facebook Pixel ID for conversion tracking and audience building.
forward_paramsboolean–Forward query parameters from the shortened link to the destination URL.
ga4_tag_idstring–Google Analytics 4 measurement ID for tracking link performance.
gtm_idstring–Google Tag Manager container ID for advanced event tracking and tag management.
head_tagsstring–Custom HTML tags to inject into the page head for scripts, metadata, or tracking.
hide_referrerboolean–Hide the HTTP referrer header when redirecting to prevent the destination from seeing the source.
idinteger–Unique identifier of the link to update. Required when updating an existing link; omit when creating new.
linkify_wordsstring–Comma-separated list of words to automatically convert into links within the destination page content.
namestring–Human-readable name or title for the link to aid organization and identification.
notestring–Internal note or memo for reference; not visible to end users.
og_descriptionstring–Open Graph description displayed when the link is shared on social media platforms.
og_imagestring–Open Graph image URL displayed when the link is shared on social media platforms.
og_titlestring–Open Graph title displayed when the link is shared on social media platforms.
replacementsstring–String-encoded replacement rules for dynamic URL parameter substitution or content modification.
rulesarray–Array of conditional redirect rules that determine the destination URL based on user attributes, device type, or other criteria. Rules are evaluated in order.
slugstring–Custom URL slug for the shortened link. If omitted, a random slug is generated automatically.
spamboolean–Mark the link as spam or suspicious content.
tiktok_pixel_idstring–TikTok Pixel ID for conversion tracking and audience building on TikTok.
urlstring–Destination URL to redirect to. Required when creating a new link; must be a valid URI.
workspace_idinteger–Workspace ID

No output schema declared.

No examples provided.

create_or_update_link_batch ~746

Create a new link or update an existing one in a workspace. Include an 'id' field to update an existing link, or omit it to create a new one. Supports batch operations by accepting an array of links.

NameTypeReqDescription
block_botsboolean–When enabled, blocks traffic from known bots and automated crawlers.
body_tagsstring–Custom HTML tags to inject into the body section of the destination page.
cloakingboolean–When enabled, hides the actual destination URL and displays a cloaked URL instead.
domain_idinteger–Numeric identifier of the domain to use for this link. Use this as an alternative to specifying a domain name.
enabledboolean–Controls whether the link is active and functional. Set to false to disable without deleting.
expiry_clicksinteger–Number of clicks after which the link automatically expires and becomes inactive.
expiry_datetimestring–Date and time when the link automatically expires and becomes inactive. Use ISO 8601 format.
expiry_destinationstring–URL to redirect users to after the link expires.
fb_pixel_idstring–Facebook Pixel ID for tracking conversions on Facebook.
forward_paramsboolean–When enabled, query parameters from the shortened link are automatically forwarded to the destination URL.
ga4_tag_idstring–Google Analytics 4 measurement ID for tracking events and conversions.
gtm_idstring–Google Tag Manager container ID for tracking and analytics.
head_tagsstring–Custom HTML tags to inject into the head section of the destination page.
hide_referrerboolean–When enabled, prevents the referrer information from being passed to the destination URL.
idinteger–Numeric identifier of an existing link to update. Omit this field to create a new link.
linkify_wordsstring–Specific words within the link that should be converted into clickable links.
namestring–Human-readable nickname or label for this link to help identify it in your workspace.
notestring–Private internal note for reference; not visible to end users.
og_descriptionstring–Open Graph description text displayed when the link is shared on social media.
og_imagestring–URL of an image to display when the link is shared on social media.
og_titlestring–Open Graph title text displayed when the link is shared on social media.
public_analyticsboolean–When enabled, analytics data for this link is publicly accessible without authentication.
qr_stylesobject–Object containing styling options for QR codes generated from this link, such as colors and patterns.
replacementsstring–URL parameter replacements to transform or modify query parameters before forwarding to the destination.
rulesarray–Array of redirect rules that determine where users are sent based on conditions like device type, location, or custom parameters.
skip_social_crawler_trackingboolean–When enabled, prevents tracking of requests from social media crawlers and bots.
slugstring–Custom URL slug for this link. Must start with a forward slash (/) and be unique within the workspace.
tiktok_pixel_idstring–TikTok Pixel ID for tracking conversions on TikTok.
urlstringyesThe destination URL where users will be redirected. Must be a valid URI.
webhooksarray–Array of webhook URLs that receive notifications when link events occur, such as clicks or conversions.
workspace_idstringyesThe workspace identifier where the link will be created or updated.

No output schema declared.

No examples provided.

delete_domain ~70

Remove a custom domain from your workspace. Once deleted, any links using this domain will no longer be functional.

NameTypeReqDescription
domain_idstringyesThe unique identifier of the domain to be removed from the workspace.
workspace_idstringyesThe unique identifier of the workspace containing the domain to be deleted.

No output schema declared.

No examples provided.

delete_link ~61

Permanently delete a specific link from a workspace by its ID. This action cannot be undone.

NameTypeReqDescription
idintegeryesThe unique identifier of the link to delete.
workspace_idstringyesThe unique identifier of the workspace containing the link to delete.

No output schema declared.

No examples provided.

delete_links ~70

Permanently delete one or more links from a workspace by their IDs. This action cannot be undone.

NameTypeReqDescription
idsarray–Array of link IDs to delete. If not provided, no links will be deleted.
workspace_idstringyesThe unique identifier of the workspace containing the links to delete.

No output schema declared.

No examples provided.

delete_webhook_from_link ~99

Remove a webhook subscription from a link by unsubscribing the specified webhook URL. This operation permanently deletes the webhook subscription relationship.

NameTypeReqDescription
hook_idstringyesThe webhook URL to unsubscribe, provided in URL-encoded format (e.g., https%3A%2F%2Fhooks.example.com%2Fabc123).
link_idintegeryesThe unique identifier of the link from which to remove the webhook subscription.

No output schema declared.

No examples provided.

export_links ~97

Export all links in a workspace in JSON or CSV format, with optional filtering by search query.

NameTypeReqDescription
formatstring–The output format for the exported links. Choose between JSON (default) or CSV.
searchstring–Optional search query to filter which links are included in the export. Only links matching the query will be returned.
workspace_idstringyesThe unique identifier of the workspace containing the links to export.

No output schema declared.

No examples provided.

get_click_counters_by_dimension ~275

Retrieve aggregated click analytics grouped by a specified dimension (such as country, platform, or browser). Returns click counts for each unique value within the selected dimension, with optional filtering by date range, country, and response format.

NameTypeReqDescription
counterstringyesThe dimension to group clicks by. Choose from: country (geographic location), platform (device type), browser (web browser), referer (HTTP referrer), isp (internet service provider), link_id (specifi…
countrystring–Filter results to a specific country using its ISO 3166-1 alpha-2 country code (e.g., 'US', 'GB', 'DE'). If omitted, all countries are included.
endstring–The end date for filtering analytics data, specified in YYYY-MM-DD format. If omitted, defaults to the current date.
formatstring–The response format for the analytics data. Choose from JSON (default, structured format), CSV (comma-separated values), or TSV (tab-separated values).
startstring–The start date for filtering analytics data, specified in YYYY-MM-DD format. If omitted, defaults to the earliest available data.
workspace_idstringyesThe workspace identifier that contains the click analytics data.

No output schema declared.

No examples provided.

get_clicks_analytics ~420

Retrieve click analytics for a workspace with flexible filtering and aggregation options. Returns time-series data suitable for charting, with support for multiple output formats and pivot transformations.

NameTypeReqDescription
browserstring–Filter results to clicks from a specific browser (e.g., Chrome, Firefox, Safari).
countrystring–Filter results to clicks from a specific country using its ISO 3166-1 alpha-2 code (e.g., US, GB, DE).
endstring–The end date for filtering clicks, specified in ISO 8601 format (YYYY-MM-DD or YYYY-MM-DDTHH:MM:SSZ). If omitted, defaults to the current date.
formatstring–Specify the response format: 'json' (default), 'csv', or 'tsv'.
frequencystring–The time granularity for aggregating data points: 'day' (default) for daily buckets or 'hour' for hourly buckets.
ispstring–Filter results to clicks from a specific Internet Service Provider.
pivotstring–Transform the response into a matrix format where dates appear as rows and links as columns. When set to 'link_id', CSV/TSV responses include header rows with link name, full URL, and ID.
platformstring–Filter results to clicks from a specific platform or operating system (e.g., Windows, Mac, iOS, Android).
refererstring–Filter results to clicks originating from a specific referrer domain.
startstring–The start date for filtering clicks, specified in ISO 8601 format (YYYY-MM-DD or YYYY-MM-DDTHH:MM:SSZ). If omitted, defaults to the beginning of available data.
timezonestring–The timezone to apply for date and time calculations (e.g., America/New_York). Affects how dates are bucketed and displayed.
workspace_idstringyesThe unique identifier of the workspace to retrieve click analytics for.

No output schema declared.

No examples provided.

get_link ~41

Retrieve detailed information about a specific link by its unique identifier.

NameTypeReqDescription
idintegeryesThe unique identifier of the link to retrieve (e.g., 24).

No output schema declared.

No examples provided.

get_link_analytics ~75

Retrieve detailed information about a specific link, including click statistics, UTM parameters, and configuration settings.

NameTypeReqDescription
idstringyesThe unique identifier of the link to retrieve. Use the link ID provided when the link was created.
workspace_idstring–Workspace ID. Optional when using OAuth2 Bearer token.

No output schema declared.

No examples provided.

list_domains ~49

Retrieve all custom domains configured for a workspace. These domains can be used as targets when creating short links.

NameTypeReqDescription
workspace_idstringyesThe unique identifier of the workspace whose domains you want to list.

No output schema declared.

No examples provided.

list_links ~185

Retrieve a paginated list of all links in a workspace with support for searching, sorting, and filtering. Results include click statistics and link metadata for each entry.

NameTypeReqDescription
pageinteger–The page number for pagination, starting from 1. Defaults to the first page if not specified.
page_sizeinteger–The maximum number of links to return per page. Defaults to 1000 if not specified.
searchstring–Optional search query to filter links by matching against link properties. Searches across relevant link fields to narrow results.
sort_bystring–The field name to sort results by. Common sortable fields include creation date, click count, and link name.
sort_dirstring–The sort direction for results: ascending or descending order.
workspace_idstringyesThe unique identifier of the workspace containing the links to retrieve.

No output schema declared.

No examples provided.

list_webhooks_for_link ~64

Retrieve all webhook subscriptions configured for a specific link. Returns a list of webhooks that are actively monitoring events for the given link.

NameTypeReqDescription
link_idintegeryesThe unique identifier of the link whose webhooks you want to retrieve. Must be a positive integer.

No output schema declared.

No examples provided.

list_workspaces ~34

Retrieve all workspaces accessible to the authenticated user. Use this operation to discover available workspace IDs for use in other API calls.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

update_domain_favicon ~121

Update the favicon URL for a custom domain within a workspace. The favicon will be displayed in browser tabs and bookmarks for the domain.

NameTypeReqDescription
favicon_urlstring–A valid URI pointing to the favicon image file. Common formats include .ico, .png, and .svg. If omitted, the favicon will not be updated.
idstringyesThe unique identifier of the domain whose favicon should be updated. Typically a numeric ID.
workspace_idstringyesThe unique identifier of the workspace containing the domain. Typically a numeric ID.

No output schema declared.

No examples provided.

Install

How do I install the com.mcparmory/linkly MCP server?

com.mcparmory/linkly runs locally as a container image, launched with docker run --rm -i ghcr.io/mcparmory/linkly:1.0.3. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

oci · ghcr.io/mcparmory/linkly:1.0.3

# add to Claude Code
claude mcp add com-mcparmory-linkly -- docker run --rm -i ghcr.io/mcparmory/linkly:1.0.3
Common questions

What is the com.mcparmory/linkly MCP server?

com.mcparmory/linkly is an MCP server listed in the public MCP registry as com.mcparmory/linkly. Create short links, manage domains, and track click analytics. This page covers its container image (ghcr.io/mcparmory/linkly:1.0.3).

Is the com.mcparmory/linkly MCP server safe to use?

com.mcparmory/linkly scores 51 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the com.mcparmory/linkly MCP server expose?

com.mcparmory/linkly exposes 18 tools: add_domain_to_workspace, get_link, create_or_update_link, get_link_analytics, list_webhooks_for_link, and 13 more. Their descriptions and schemas cost roughly 3,167 tokens of context every time the server is loaded.

Is the com.mcparmory/linkly MCP server still maintained?

com.mcparmory/linkly is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.