Web Scan MCP server

online · 100% uptime

by ankitkumarjha515·io.github.ankitkumarjha515/web-scan·v1.0.0

No reviews yet

Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.

B77/100grade B

Write a review Run it

What users say

No reviews yet

Be the first

Safety scan

B77/100

full report

Adoption

Growing

0 stars

Reviews

Write one

Nobody has reviewed Web Scan yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Web Scan tools (3, 1 write)

write = sends, deletes, buys or posts

get_reportFree
Read a stored Web Scan report by its slug (the part after /r/ in a web-scan.agentmarket.lol/r/<slug> link) without re-scanning: score, grade, scan time and the failing or warning checks with fixes. Use this when the user shares a report link. Reports expire after two weeks; to check the current state of a site, use scan_url or verify_fixes instead.
scan_urlwrite actionFree
Run a fresh Web Scan audit of a public URL and return its score (0-100), grade, and every failing or warning check with its id, title and fix: the result is complete in itself. reportUrl is a shareable link only when the request carries a signed-in Web Scan token (reports are saved for signed-in users only); otherwise it is null and nothing is stored. fullReportUrl is always present: the full report on the website, to share with the user. Use this first, to find out what to fix on a live page. Takes about 5-15 seconds. Cannot scan localhost or private networks; use a deployed or preview URL.
verify_fixesFree
Re-scan a URL after you deployed fixes and report, per check id, whether it now passes (fixed: true), plus the new score, the previous score, what is still failing with its fix, and allFixed. Use this after a change reaches production (or a public preview) instead of asking the user to re-scan. Pass the check ids from the scan or fix prompt; with none, every failing or warning check is returned. If a fix you made still shows fixed: false, the deploy may not be live yet or a CDN may be serving a cached page: wait about a minute and call again before concluding the fix failed.

Public scan report

scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it

1 high

–Code scanremote-only server, no package to scann/a
Live reliabilityremote reachable in 3305ms17/20
Tool poisoning3 tool descriptions checked15/15
Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
Maintenancelast push 4 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

highWrite-action tools reachable without authenticationauth.open-write

Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Web Scan compares

Against every graded SEO MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 77/100; higher than 50% of 769 SEO servers
Tools: 3; the typical SEO server has 6
Tools that change things: 33%; typical: 0%. Fewer write tools means less an agent can break
Uptime: 100%; of our recent checks; the typical remote SEO server answers 100%
Response time: 971 ms; faster than 12% of 536 SEO servers

What its tools let an agent do: 2 read · 1 change

Install Web Scan in Claude Code, Cursor or VS Code

claude mcp add --transport http web-scan https://preflight-api.agentmarket.lol/api/mcp

Add to Cursor

What the publisher says

From the Web Scan repository's README, as published. We do not edit it. Read it on GitHub

Web Scan

Your coding agent shipped it. Web Scan checks it.

One call audits any live URL in about 5 seconds: 85 checks across SEO, AI search (GEO), security headers, leaked API keys, Core Web Vitals and accessibility. Every finding comes with the exact fix, ranked by how many points it is worth. Then your agent fixes it and verifies the fix on the live site, without you re-running anything.

Free. No sign-up. No API key. Works as an MCP server, a GitHub Action, a CLI and on the web.

scan_url  →  fix  →  deploy  →  verify_fixes  →  allFixed: true

Why agents use it

production, per check id. No screenshots to read, no dashboards to click.

Built for the agent loop. scanurl finds what is wrong, verifyfixes proves each fix landed in

Findings are ranked by real score gain (the report is re-scored with that one fix applied), so the agent works in the order that matters.

Fixes, not findings. Each failing check returns its id, what was found on the page, and a concrete fix.

secret keys (OpenAI, Anthropic, Stripe, AWS, GitHub, Slack, SendGrid, database URLs, private keys) and Supabase service_role keys. Every match gets a second look that drops placeholders and docs examples, so a red result is a real leak.

Catches what AI-built apps leak. Reads the JavaScript the site serves to every visitor and finds live

receive (no JavaScript), which AI bots robots.txt lets in, and whether the page answers the questions buyers ask.

Sees the page the way AI search does. Shows what ChatGPT, Claude and Perplexity crawlers actually

critical check fails, next to a benchmark of 25 well-known sites. Missing security headers are hardening notes, not holes. Unsure findings say "needs checking".

Honest scoring. One number from three parts (search and sharing, security, speed), capped when a

hidden paths. Text from scanned pages is returned as data, never as instructions.

Safe to point at anything public. Passive only: it reads what the site already serves and never probes

MCP server

Remote, stateless, Streamable HTTP. No key needed.

https://preflight-api.agentmarket.lol/api/mcp

Claude Code

claude mcp add --transport http web-scan https://preflight-api.agentmarket.lol/api/mcp

Cursor (~/.cursor/mcp.json), Windsurf, VS Code (.vscode/mcp.json, key servers)

{
  "mcpServers": {
    "web-scan": { "url": "https://preflight-api.agentmarket.lol/api/mcp" }
  }
}

Codex (~/.codex/config.toml)

[mcp_servers.web-scan]
url = "https://preflight-api.agentmarket.lol/api/mcp"

Tools

Try it in your agent:

Scan https://my-app.com with Web Scan, fix everything in this repo in order of points, and verify the fixes

once I deploy.

GitHub Action

Fail the build when a deploy makes the site worse.

- uses: ankitkumarjha515/web-scan@v1
  with:
    url: https://my-app.com
    min-score: 85        # fail below this score
    fail-on: score       # score | failures | any | never

Writes a summary table to the job page, with a link to the full interactive report. Pair it with a preview deployment to catch problems before they reach production.

CLI

No dependencies, Node 18+.

node bin/web-scan.mjs https://my-app.com --min-score 90
node bin/web-scan.mjs https://my-app.com --fail-on failures --json

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Web Scan: common questions

Is Web Scan MCP server safe?: Mostly: it is graded B (77/100). Read the Web Scan safety report
How do I install Web Scan?: It runs remotely at preflight-api.agentmarket.lol. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Web Scan need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Web Scan maintained?: The last commit was 14 days ago (2026-10-21). The latest release is v1.0.0.
Is Web Scan up?: 100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Web Scan?: Servers from other publishers that do the same job: squirrelscan MCP server, Web Validator by DigestSEO MCP server and Google Search Console MCP server.
How does Web Scan compare with other SEO MCP servers?: safety score 77/100 (higher than 50% of 769 SEO servers); tools 3 (the typical SEO server has 6); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Web Scan

Same job from other publishers: the closest match first, then the best rated.

squirrelscan
Website QA for your coding agent: audit SEO, performance, security, accessibility over MCP.
not reviewed
Established
B
Web Validator by DigestSEO
Audit public webpages and supplied markup for HTML, CSS, SEO, JSON-LD, and link issues.
More from AKzar1el →
not reviewed
Growing
A
Google Search Console
Google Search Console: SEO audits, performance queries, URL inspection, indexing checks.
not reviewed
Growing
B
Crawlie
Technical SEO + GEO (AI-search) site audits: hosted crawls, prioritized fixes, report diffs.
not reviewed
Growing
A
Scrawly MCP Server
MCP server for the Scrawly SEO crawler: query local audits and propose confirmation-gated fixes.
not reviewed
Growing
A

Run it through the gateway

With the gateway added, ask your agent for it by name:

agent prompt

call io.github.ankitkumarjha515/web-scan → get_report

Free per call. Metered, capped by your key, logged for reliability.

Add the gateway (gw.mcp.market)

Rating: —
Safety grade: B · 77/100
Stars: 0
Downloads/wk: –
Price: Free
Licence: MIT
Transport: Remote
Uptime: 100% · 28/28 checks
Version: 1.0.0
Category: SEO
Last release: 2026-10-21

Endpoint

https://preflight-api.agentmarket.lol/api/mcp

streamable-http

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/ankitkumarjha515-web-scan.svg)](https://mcp.market/server/ankitkumarjha515-web-scan)

How the badge works