# Unicode Normalization and Homoglyph Detector MCP for AI Agents MCP

> Unicode Normalization and Homoglyph Detector identifies malicious character substitutions and hidden text in strings. It helps you catch spoofing attempts and invisible characters that bypass security filters, making it a vital tool for verifying the integrity of any input data.

## Overview
- **Category:** security
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/undefined/mcp
- **Tags:** unicode, homoglyph, security, normalization, detection, spoofing

## Description

You're reviewing code or checking user-submitted links, and everything looks fine at first glance. But then you notice something off about a URL or a username. This is where Unicode attacks hide. They use characters that look identical to the naked eye but are technically different, like swapping a Latin 'a' for a Cyrillic one. This MCP lets your AI client scan text for these exact tricks. It looks for zero-width spaces and other invisible markers used to slip past filters or trick reviewers. Instead of manually inspecting every character, you can just point your agent at a string and get a clear report on what's actually there. Since this is part of the Vinkius catalog, you can connect it once and immediately use these security checks across all your favorite AI-compatible editors and clients. It turns a tedious manual inspection into an automated security check.

## Tools

### inspect_homoglyph_substitutions
Reports only the visual substitutions found in a string. It helps you see exactly which characters are being used to mimic others.

### analyze_string_security
Performs a high-level security assessment of any provided input. Use this for a quick check on whether a string is safe or suspicious.

### detect_hidden_characters
Scans specifically for the presence of invisible or zero-width characters. This is essential for finding hidden payloads in text.

## Prompt Examples

**Prompt:** 
```
Is this link safe: 'pаypal.com'?
```

**Response:** 
```
The link is unsafe. It uses a **Cyrillic 'а'** instead of a Latin 'a', which is a common spoofing technique.
```

**Prompt:** 
```
Check this text for any hidden characters.
```

**Response:** 
```
I found one hidden character at position 5:

* **Character:** U+200B
* **Type:** Zero Width Space
```

**Prompt:** 
```
Are there any visual substitutions in the word 'hello'?
```

**Response:** 
```
No, all characters in 'hello' are standard Latin characters with no visual mimics detected.
```

## Capabilities

### Spot visual spoofing
Identifies characters that look like others to prevent phishing.

### Find invisible text
Detects zero-width characters used to hide malicious payloads.

### Assess string safety
Provides a quick security score for any piece of text.

### Isolate substitutions
Pulls out only the specific characters that are causing the mismatch.

## Use Cases

### URL Verification
A developer sees a suspicious link in a PR and asks their agent to check it for homoglyph attacks.

### Config File Auditing
Checking for hidden characters in a configuration file to ensure no zero-width spaces are breaking the build.

### Content Moderation
An analyst uses the MCP to scan user comments for invisible characters used to bypass word filters.

### Code Review Security
A reviewer asks their agent to inspect a string literal in a code snippet for potential spoofing.

## Benefits

- Catch phishing attempts early by using inspect_homoglyph_substitutions to find visual mimics.
- Prevent bypass attacks by using detect_hidden_characters to find zero-width spaces.
- Speed up security reviews with a quick assessment via analyze_string_security.
- Automate text integrity checks directly within your AI-compatible workflow.
- Eliminate manual character inspection by letting your agent handle the heavy lifting.

## How It Works

The bottom line is you get an automated way to verify that text is exactly what it appears to be.

1. Connect your preferred AI client to the MCP via Vinkius.
2. Provide a string or text snippet to your agent for inspection.
3. Receive a detailed breakdown of any hidden or deceptive characters found.

## Frequently Asked Questions

**How does Unicode Normalization and Homoglyph Detector prevent phishing?**
It identifies characters that look identical to others but have different codepoints, letting you catch fake URLs before they cause damage.

**Can I use the Unicode Normalint and Homoglyph Detector with Claude?**
Yes, you can connect this MCP to any compatible client like Claude or Cursor via Vinkius.

**Does the Unicode Normalization and Homoglyph Detector find zero-width spaces?**
Yes, it specifically scans for invisible characters that are often used to bypass text filters.

**What makes the Unicode Normalization and Homoglyph Detector different from a standard text editor?**
It looks at the underlying integer codepoints rather than just the visual rendering of the character, revealing things humans can't see.

**Is the Unicode Normalization and Homoglyph Detector useful for code reviews?**
Absolutely, it helps you find hidden characters in strings that might be causing unexpected behavior or security vulnerabilities in your code.