golive MCP server
Check a site before you share it: link previews, SPA refresh 404s, noindex, security headers.
0 stars
Reviews
Write oneNobody has reviewed golive yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
golive tools (5, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_basicsCheck the things that get forgotten at launch: template titles like 'Vite + React', the Vite favicon, missing meta description, viewport and lang, apple-touch-icon, noindex or robots.txt left on from staging, and mixed content.
check_link_previewCheck the Open Graph and Twitter card tags on a URL and show how the link will look on LinkedIn, X, Slack, iMessage and Discord. Loads the og:image and checks it is reachable, a raster format, about 1200x630, and under platform size limits. Returns the image so you can see it.
check_routesOpen a site's internal links directly, the way a refresh, bookmark or shared link does. Catches the single-page-app 404 (works when clicked, breaks on refresh) and names the host-specific fix, e.g. the vercel.json rewrite. Also checks that made-up URLs return a real 404.
check_security_headersCheck HTTPS, the http to https redirect, HSTS, nosniff, clickjacking protection, CSP, Referrer-Policy and X-Powered-By on a URL, each with the header to add.
golivewrite actionRun every check on a URL before it gets shared or launched: how the link preview will look on LinkedIn, X, Slack, iMessage and Discord (and whether the image loads, is the right size, and is not an SVG), sub-pages that 404 on refresh, noindex or robots.txt left on from staging, template titles and Vite favicons, missing security headers, and http that does not redirect. Returns findings with fixes
Public scan report
scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it
- Code scan21 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
What the publisher says
From the golive repository's README, as published. We do not edit it. Read it on GitHub
golive-mcp
Check a site before you share the link.
You deploy, paste the link into LinkedIn, and get a grey box with no image. Or someone refreshes /pricing and gets a Vercel 404. golive catches both before anyone sees them, plus the staging noindex you forgot and the Vite logo still sitting in the tab.
It runs as an MCP server, so Claude, Cursor or any MCP client can check a URL after deploying and fix what it finds. It also runs as a plain CLI. No API key, no account.
What it found on a fresh Vite app
This is a React app straight out of npm create vite, built, and served by a host with no SPA fallback. Real output, trimmed:
$ npx golive-mcp check http://localhost:4791 /about
Not ready: 2 blocking, 10 to look at, 4 fine.
## Link previews
✗ og:image: No preview image. On LinkedIn, X and iMessage the link becomes a plain grey text card.
Fix: Add a 1200x630 image: <meta property="og:image" content="https://yoursite.com/og.png">
! og:title: Missing. Platforms fall back to the <title> ("demo"), which is often not what you want shared.
! twitter:card: Missing. X reads your og: tags but only shows a small thumbnail without this.
## How the link will look
LinkedIn: [no image] / demo / localhost:4791
X: small square thumbnail (no twitter:card tag) / demo / localhost:4791
Slack: localhost:4791 / demo / (none) / [no image]
## Routes
✗ link /about: Opening /about directly returns 404. It works when clicked inside the app,
but breaks on refresh, bookmark or share.
Fix: Configure the host to serve index.html for unknown paths, so the client router can take over.On Vercel the fix line names the exact vercel.json rewrite. On Netlify it names the _redirects line.
Install
Claude Code
claude mcp add golive -- npx -y golive-mcpClaude Desktop, Cursor, Windsurf (add to the MCP config file)
{
"mcpServers": {
"golive": { "command": "npx", "args": ["-y", "golive-mcp"] }
}
}No MCP client
npx golive-mcp check yoursite.com
npx golive-mcp check localhost:5173 /about /pricingThe CLI exits with code 1 when anything is blocking, so it drops into CI as a pre-launch gate.
Then ask your assistant something like "I just deployed, check https://mysite.com before I post it" and it will run the checks and fix the findings in your code.
Tools
Every tool takes a url. golive and check_routes also take paths, a list of routes to open directly. Client-rendered apps have no links in their HTML, so pass your real routes to test them.
Limits
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Install directly
Runs npx -y golive-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add golive-mcp -- npx -y golive-mcp
golive: common questions
- Is golive MCP server safe?
- Yes, by our scan: it is graded A (89/100). Read the golive safety report
- How do I install golive?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does golive need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is golive maintained?
- The last commit was in the last day (2026-09-24). The latest release is v1.0.1.
- What can I use instead of golive?
- Servers from other publishers that do the same job: MCP server, Nel Veil MCP server and EverThread MCP server. Compare all golive alternatives.
Alternatives to golive
Same job from other publishers: the closest match first, then the best rated.
- MCPSecurity tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.not reviewedGrowingA
- Nel VeilFree passive security scanning - check any domain's DMARC, TLS, headers, and exposures.not reviewedGrowingA
- EverThreadPlain-English website security check for agents: certificate, headers, scripts, forms, spam.not reviewedNewA
- Fedramp Oscal Ssp Lint16 checks on a system-security-plan JSON, in your editor, before a validator returns the packagenot reviewedNewA
- Prodcheck4,372 pre-production checks: security, performance, scale, integrations, post-launch.not reviewedGrowingA