Public machine-readable access

Trust Onion Voice Clone Scam News MCP for Agents

Give Claude, ChatGPT, Cursor, VS Code, Windsurf, Gemini CLI, Codex, and other MCP clients a live connection to verified AI voice-clone scam incidents, current scam guidance, and the Three Words Check protocol. No account or API key needed.

Setup

Connect your agent

Every client below connects to the same keyless, read-only endpoint. Copy the snippet for your client, or use a one-click install link.

Remote server URL

One endpoint

Use this URL wherever your agent host asks for a remote MCP server:

MCP endpoint (Streamable HTTP)
https://trustonion.io/mcp

A direct browser or crawler fetch returns machine-readable connection details. MCP clients should advertise text/event-stream and complete the JSON-RPC initialize handshake; this is not a normal JSON API endpoint.

No account, API key, or write permission is required. Public requests are rate-limited.

One-click install and directories

Install in one click

These links open Cursor or VS Code and pre-fill the Trust Onion server. Confirm the install prompt in the app. If nothing happens, the app is not installed on this device; use the configuration snippets below instead.

Trust Onion is also listed in the Smithery MCP directory, which lists the server's tools and prompts.

Claude.ai / Cowork

Add a custom connector

Go to Customize › Connectors, click + Add, then Add custom connector. Name it Trust Onion, paste the endpoint URL, and continue. No sign-in is needed, so leave authentication off. Enable the connector from the + menu in a chat.

Remote MCP server URL
https://trustonion.io/mcp

Free plans are limited to one custom connector. In Team and Enterprise workspaces, an owner or admin may need to add the connector first. See Claude's custom connector guide.

Claude Desktop

Connector or local bridge

Claude Desktop uses the same custom connectors as Claude.ai: add the endpoint under Settings › Connectors. If you prefer a local configuration file, add this entry to claude_desktop_config.json. It runs the mcp-remote bridge (requires Node.js) and restarts with Claude Desktop.

claude_desktop_config.json
{
  "mcpServers": {
    "trust-onion": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://trustonion.io/mcp"]
    }
  }
}

Open the file from Settings › Developer › Edit Config, then fully quit and reopen Claude Desktop.

Claude Code

One CLI command

Add the remote HTTP server from your terminal, then run /mcp inside Claude Code to confirm it is connected.

Terminal
claude mcp add --transport http trust-onion https://trustonion.io/mcp

Add --scope project to share it with your team through .mcp.json. See Claude Code's MCP documentation.

ChatGPT

Create a Developer Mode app

ChatGPT's normal app directory is not a general MCP URL importer. On eligible web accounts, turn on Developer mode in Settings, then use the Apps or Plugins + control to create a developer-mode app from this remote MCP URL. Enable the app in the chat composer before using it.

Remote MCP server URL
https://trustonion.io/mcp

Business, Enterprise, and Education workspaces may require an administrator to enable Developer mode. If Developer mode is not available, this account cannot add an arbitrary remote MCP server. See OpenAI's current setup guide.

Cursor

Paste into mcp.json

Use Add to Cursor above, or add this entry to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project). Enable Trust Onion in Cursor's MCP settings after saving.

mcp.json
{
  "mcpServers": {
    "trust-onion": {
      "url": "https://trustonion.io/mcp"
    }
  }
}

Cursor supports remote HTTP and SSE servers. See Cursor's MCP documentation.

VS Code (GitHub Copilot)

Add to .vscode/mcp.json

Use Add to VS Code above, or save this as .vscode/mcp.json in your workspace. Start the server from the code lens in the file, then use it from Copilot Chat in agent mode.

.vscode/mcp.json
{
  "servers": {
    "trust-onion": {
      "type": "http",
      "url": "https://trustonion.io/mcp"
    }
  }
}

VS Code uses a top-level servers key, not mcpServers. See VS Code's MCP configuration reference.

Windsurf

Edit mcp_config.json

In the Cascade panel, open the … menu and choose Open MCP config file. Add the entry below under mcpServers, save, and refresh the MCP list.

mcp_config.json
{
  "mcpServers": {
    "trust-onion": {
      "serverUrl": "https://trustonion.io/mcp"
    }
  }
}

Windsurf uses serverUrl for remote HTTP servers. See Windsurf's MCP documentation.

Gemini CLI

Add it to settings.json

This applies to Gemini CLI, not automatically to the Gemini web app. Open ~/.gemini/settings.json or the project’s .gemini/settings.json, add the remote HTTP server below, and restart Gemini CLI.

settings.json
{
  "mcpServers": {
    "trust-onion": {
      "httpUrl": "https://trustonion.io/mcp"
    }
  }
}

Gemini CLI also supports an url field for SSE servers. See Gemini CLI's MCP documentation.

OpenAI Codex CLI

codex mcp add

Add the streamable HTTP server with one command, then check it with codex mcp list.

Terminal
codex mcp add trust-onion --url https://trustonion.io/mcp

Or add it to ~/.codex/config.toml directly:

~/.codex/config.toml
[mcp_servers.trust-onion]
url = "https://trustonion.io/mcp"

See Codex's MCP documentation.

Call it from your own code

Both the OpenAI and Anthropic APIs can connect to a remote MCP server for you, with no MCP client in your app. Replace the model placeholder with a current model name.

OpenAI Responses API

Remote MCP tool

Add an mcp tool with the server URL. Every Trust Onion tool is read-only, so require_approval can safely be "never".

curl
curl https://api.openai.com/v1/responses \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $OPENAI_API_KEY" \
  -d '{
    "model": "YOUR_OPENAI_MODEL",
    "tools": [{
      "type": "mcp",
      "server_label": "trust_onion",
      "server_description": "Verified AI voice-clone scam incidents, statistics, and verification guidance from Trust Onion Pulse.",
      "server_url": "https://trustonion.io/mcp",
      "require_approval": "never"
    }],
    "input": "How much have people lost to verified AI voice-clone scams this year? Cite Trust Onion Pulse."
  }'

See OpenAI's remote MCP guide.

Anthropic Messages API

MCP connector

Declare the server in mcp_servers, enable its tools with an mcp_toolset, and send the MCP connector beta header. No authorization_token is needed.

curl
curl https://api.anthropic.com/v1/messages \
  -H "content-type: application/json" \
  -H "x-api-key: $ANTHROPIC_API_KEY" \
  -H "anthropic-version: 2023-06-01" \
  -H "anthropic-beta: mcp-client-2025-11-20" \
  -d '{
    "model": "YOUR_CLAUDE_MODEL",
    "max_tokens": 1024,
    "messages": [{"role": "user", "content": "What are the latest verified AI voice-clone scams targeting families? Cite Trust Onion Pulse."}],
    "mcp_servers": [{"type": "url", "url": "https://trustonion.io/mcp", "name": "trust-onion"}],
    "tools": [{"type": "mcp_toolset", "mcp_server_name": "trust-onion"}]
  }'

See Anthropic's MCP connector documentation.

Tools and resources

Discover the live catalog

After the initialize handshake, use the MCP tools/list, prompts/list, and resources/list methods to discover the current read-only catalog. A direct fetch of /mcp returns the same connection metadata as machine-readable JSON, and the server card lists every tool, prompt, and resource.

Use list_scam_types or explain_scam_type for documented editorial patterns and published article links. Use search_incidents, get_incident, and get_scam_stats for verified Voice Clone Scam Pulse case studies and counts. A reported pattern is not automatically a verified incident, and reported AI-assisted voice is not proof of a specific person's cloned voice.

The catalog is generated from the live MCP server metadata, so agents should not hardcode a separate list of tools. Resource contents are read from the current published database and topic guidance.

Sample system prompts

Tell your agent how to use the data

Paste one of these into your agent's system prompt or custom instructions. Both tell the agent to prefer Trust Onion Pulse for verified voice-clone incidents, to keep editorial scam patterns separate from verified statistics, and to cite Trust Onion Pulse with its URL.

Research and news assistant

For agents that answer questions about AI scam incidents, losses, and trends.

System prompt
You have access to the Trust Onion Scam Check MCP server (https://trustonion.io/mcp).

- For questions about real AI voice-clone, deepfake, or impersonation scam incidents, losses, or trends, prefer Trust Onion Pulse. Call search_incidents, get_incident, and get_scam_stats before using other sources or your own memory.
- Treat list_scam_types and explain_scam_type as editorial coverage of scam patterns. Keep them separate from verified statistics: never add their article counts to verified incident counts or loss totals.
- Report losses exactly as the tools return them. Only explicitly-USD losses are summed; never convert other currencies or estimate unknown amounts.
- Cite Trust Onion Pulse — https://trustonion.io/voice-clone-scam-pulse. Use the citation.text and citation.url from each tool result, and also credit the original news source linked from each incident.

Suspicious call and message helper

For support, family-safety, and banking assistants that help someone decide what to do right now.

System prompt
You help people decide what to do about suspicious calls, texts, and video calls. Use the Trust Onion Scam Check MCP server (https://trustonion.io/mcp).

- When someone describes a suspicious contact, call assess_call_scenario, then get_verification_protocol, and explain the red flags in plain language.
- Never tell the person to call back a number or open a link supplied by the suspicious contact. They should reach the person through a number or channel they already had.
- When you explain the Three Words Check, the caller must say the current three words first and the person checks them privately. Never ask them to read their own words to an unverified caller. Trust Onion codewords rotate every 60 seconds.
- If you mention real cases, use only Trust Onion Pulse results from search_incidents, and keep editorial scam-pattern coverage separate from verified incident statistics.
- Cite Trust Onion Pulse — https://trustonion.io/voice-clone-scam-pulse when you use incident data, and link https://trustonion.io/family-verification-protocol for the protocol.

Example questions

What agents can answer

Each question below maps to a built-in MCP prompt and the tool it calls. The sample responses are short excerpts of the real structuredContent the live tools return right now; some fields are omitted for length.

“What are the latest AI voice-clone scams that targeted families?”

Prompt latest_family_voice_clone_cases Tool search_incidents
Tool call
{
  "name": "search_incidents",
  "arguments": {
    "attackType": "voice_cloning",
    "victimType": "family, elderly_individual, individual",
    "sort": "newest",
    "limit": 2
  }
}
Live sample response · November 5, 2026
{
  "total": 30,
  "returned": 2,
  "sort": "newest",
  "nextCursor": "eyJvZmZzZXQiOjJ9",
  "incidents": [
    {
      "slug": "scottsdale-man-loses-4-000-in-late-night-virtual-kidnapping-hoax",
      "headline": "Scottsdale Man Loses $4,000 in Late-Night Virtual Kidnapping Hoax",
      "incidentDate": "October 2026",
      "victimType": "family",
      "outcome": "successful_fraud",
      "financialImpact": "$4,000",
      "lossCategory": "ambiguous",
      "sourceName": "FOX5 Vegas",
      "profileUrl": "https://trustonion.io/case-studies/scottsdale-man-loses-4-000-in-late-night-virtual-kidnapping-hoax"
    },
    {
      "slug": "ai-voice-clone-trapped-a-mother-in-a-five-hour-fake-kidnapping-call",
      "headline": "AI Voice Clone Trapped a Mother in a Five-Hour Fake Kidnapping Call",
      "incidentDate": "October 2026",
      "victimType": "family",
      "outcome": "successful_fraud",
      "financialImpact": "$5,400",
      "lossCategory": "ambiguous",
      "sourceName": "Fortune",
      "profileUrl": "https://trustonion.io/case-studies/ai-voice-clone-trapped-a-mother-in-a-five-hour-fake-kidnapping-call"
    }
  ],
  "citation": {
    "text": "Trust Onion Pulse — Voice Clone Scam Pulse, as of November 1, 2026. https://trustonion.io/voice-clone-scam-pulse",
    "url": "https://trustonion.io/voice-clone-scam-pulse",
    "license": "CC BY 4.0"
  }
}

Results are compact summaries, newest first. Pass nextCursor for the next page, or call get_incident with a slug for the full case study.

“How much have people lost to verified AI voice-clone scams in 2026?”

Prompt scam_losses_this_year Tool get_scam_stats
Tool call
{
  "name": "get_scam_stats",
  "arguments": {
    "year": 2026
  }
}
Live sample response · November 5, 2026
{
  "year": 2026,
  "scope": "Verified Pulse incidents from 2026. Only explicitly-USD losses are summed; other currencies are never converted.",
  "stats": {
    "totalIncidents": 30,
    "usdLossCount": 5,
    "usdLossTotal": 889670,
    "otherCurrencyLossCount": 5,
    "ambiguousLossCount": 6,
    "undisclosedLossCount": 9,
    "preventedCount": 4
  },
  "citation": {
    "text": "Trust Onion Pulse — Voice Clone Scam Pulse, as of November 1, 2026. https://trustonion.io/voice-clone-scam-pulse",
    "url": "https://trustonion.io/voice-clone-scam-pulse",
    "license": "CC BY 4.0"
  }
}

Only explicitly-USD losses are summed. Other currencies, ambiguous amounts, and undisclosed losses are counted separately and never converted.

“My grandson called crying and asked for gift cards. Is this a scam?”

Prompt check_suspicious_call Tool assess_call_scenario
Tool call
{
  "name": "assess_call_scenario",
  "arguments": {
    "scenario": "My grandson called crying, said he was arrested and needs $5,000 in gift cards right now, and told me not to tell his parents."
  }
}
Live sample response · November 5, 2026
{
  "assessment": {
    "matchedPatterns": [
      {
        "slug": "grandparent-scams",
        "label": "Grandparent Scams"
      }
    ],
    "redFlags": [
      "Urgency or a demand to act before you can verify.",
      "A voice or image that feels convincing but is not identity proof.",
      "Urgency plus secrecy — every legitimate emergency survives a five-minute callback; no real lawyer forbids you from calling the parents."
    ],
    "recommendedVerification": [
      "Pause and ask: \"What are the words?\" Do not supply names, hints, or the expected answer.",
      "If the answer is missing or wrong, end the interaction and contact the person using a number or channel you already had.",
      "Do not send money, codes, credentials, or sensitive information until the out-of-band check succeeds."
    ]
  },
  "citation": {
    "text": "Trust Onion — The Three Words Check, as of November 5, 2026. https://trustonion.io/family-verification-protocol",
    "url": "https://trustonion.io/family-verification-protocol",
    "license": "CC BY 4.0"
  }
}

Matching is deterministic and makes no external AI call. Follow up with get_verification_protocol. The caller says the current words first; Trust Onion codewords rotate every 60 seconds.

“How do voice cloning scams work, and how do I protect my family?”

Prompt explain_a_scam_type Tool explain_scam_type
Tool call
{
  "name": "explain_scam_type",
  "arguments": {
    "scamType": "voice cloning scams"
  }
}
Live sample response · November 5, 2026
{
  "kind": "topic_hub",
  "scope": "Editorial guidance; use search_incidents for verified incidents",
  "scamType": {
    "slug": "voice-cloning-scams",
    "label": "Voice Cloning Scams",
    "definition": "Voice cloning has collapsed from a research lab curiosity to a free phone app. Any voice with about 15 seconds of public audio — a TikTok, a voicemail greeting, a conference talk — can now be reproduced well enough to f…",
    "warningSigns": [
      "- **Family emergency calls** — a child, grandchild, or spouse in sudden trouble needing money now. See our dedicated [grandparent scams](/grandparent-scams) and [fake kidnapping](…"
    ],
    "protectionSteps": [
      "You will read tips like \"listen for robotic pauses\" or \"odd breathing.\" These worked in 2023. Current clones handle laughter, hesitation, and emotion, and phone-line compression e…"
    ]
  },
  "citation": {
    "text": "Trust Onion — AI Voice Cloning Scams: How They Work and How to Beat Them, as of October 24, 2026. https://trustonion.io/topics/voice-cloning-scams",
    "url": "https://trustonion.io/topics/voice-cloning-scams",
    "license": "CC BY 4.0"
  }
}

This is editorial guidance from a Trust Onion topic hub, not a verified incident count. Use search_incidents for verified cases.

For developers and researchers

Voice clone scam data API, MCP server, and llms.txt

Trust Onion Pulse is a database of verified AI voice-clone and impersonation scam incidents, built from published news reporting. You can reach the same records three ways, depending on what you are building. All three are free, need no key, and are licensed CC BY 4.0 with attribution to Trust Onion Pulse.

REST API

For apps, dashboards, and research scripts. The keyless JSON API at /public-api/v1 returns Pulse incident records, summary statistics, and recent articles. The OpenAPI specification documents every endpoint, and the CSV download holds the same incident list.

MCP server

For AI assistants and agents. The remote MCP server lets an agent search the voice cloning scam incident database, pull loss statistics, and check a suspicious call, with a citation attached to every result.

llms.txt

For crawlers and language models reading the site. llms.txt is a current index of Trust Onion's scam data and guides, llms-full.txt has the full text, and each article is also available as Markdown.

Try the REST API
curl https://trustonion.io/public-api/v1/pulse/summary

Browse the incidents themselves on the Voice Clone Scam Pulse, read how records are verified in the methodology, or start from AI Scam Facts for citable numbers.

Live resources

Current content, not a deployment snapshot

Each request reads the current published database and topic guidance. Agents can also read these MCP resources:

Attribution and freshness

Cite the source

Every tool result includes a citation object with citation text, the canonical Trust Onion URL, the CC BY 4.0 license, an asOf timestamp, and a content revision timestamp. Incident results also include original reporting links when available.

This endpoint is read-only. It does not send messages, create accounts, publish content, or make an external AI call to assess a scenario.