site-spec MCP server

Read from the package source without running it. The installed server may list more.

• audit_site

  Audit a website: takes url (a live URL, a bare hostname, or a local directory of built output), optional checks (check ids to filter to) and optional maxPages (1-200, default 25), and returns { ok, target, mode, live, errors, warnings, pages, findings } where every finding carries checkId, severity, file, category and fixAvailable. Covers the layer a browser does not show: robots.txt and llms.txt

• compile_spec

  Compile business data into a deployable site: takes business (the pure-data site config { pack, brief, site, spec }, plus optional foundation and target) and optional out_dir, and returns { ok, pack, spec, files, findings }, with written and writtenTo when out_dir is given. `pack` is a registered pack id, `brief` is the verified business facts (name, category, phone, address, hours, reviews), `sit

• fix_issue

  Fix one audit finding: takes url_or_path, a single check_id, optional write (default false), optional out_dir and optional maxPages, and returns { checkId, fixAvailable, matchedFindings, actions, diffs, written }. Defaults to a dry run that writes nothing; write: true requires a local directory target and is refused for a URL, because a remote server is not writable. Not every check is repairable:

• list_checks

  List every audit check: takes no arguments and returns { count, fixable, checks } where each check has id, description, category (seo, privacy, security, accessibility, performance, structured-data, ai-searchability, structure) and fixable. Call this before filtering audit_site or calling fix_issue.

• Code scan2 source files scanned20/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 10 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

site-spec: common questions

Is site-spec MCP server safe?

Yes, by our scan: it is graded A (85/100). Read the site-spec safety report

How do I install site-spec?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does site-spec need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is site-spec maintained?

The last commit was 10 days ago (2026-09-11). The latest release is v0.3.2.

What can I use instead of site-spec?

Servers from other publishers that do the same job: upkeep-mcp server, HubVibe Site Audits MCP server and SyteCheck MCP server. Compare all site-spec alternatives.