Faro is a trust and verification API designed to provide real-time safety assessments for digital interactions involving links, payees, and messages. The service operates through a single API call that returns a plain-language verdict, enabling applications and automated agents to determine whether a given entity is safe before any action is taken. The API integrates with multiple data sources, including Google Safe Browsing, RDAP, OpenSanctions, and LLM reasoning, to evaluate risks such as phishing, malware, social engineering, and freshly registered lookalike domains. The API offers three primary verification tools: URL verification, payee verification, and message verification. For URLs, the system checks against known threat databases and flags patterns associated with social engineering. For payees, it cross-references sanctioned names, known fraudulent handles, and mule patterns across global financial rails. For messages, it identifies OTP scams, impersonation attempts, urgency tactics, and hidden malicious links. Each tool returns a structured verdict with a recommended action and a plain-language explanation, allowing developers to branch their application logic based on the result. Typical use cases include fintech applications where a payee is screened before a transfer is initiated, marketplaces that need to vet seller links and contact details, and messaging platforms that flag scam texts inline. The API is designed for both backend integration via plain HTTP and JSON, and for use as an MCP server for agents, providing three tools that can be called before an agent clicks a link or sends money. The same engine and graph power both the REST API and the MCP server, ensuring consistent verdicts across different integration methods.