com.validoria/validoria-mcp

Run a free 6-test HTTP scan against a public URL without an API key. Rate-limited (5/IP/hour, 3/session/day). Returns scanId — poll with guest_get_scan. For continuous monitoring, sign up free and use…

Poll results for a guest_start_scan. Pass the scanId and guestSessionId from the start response. No API key required.

List all monitoring targets for your team. Returns name, URL, type, status, and uptime info for each target.

Get detailed information about a specific target including status, uptime, fingerprint, and composite scores.

Get composite scores (Security, SEO, Performance, Accessibility) for a target. Each score is 0-100 with a status rating.

List findings (discovered issues) across your targets. Filter by status, severity, or target. Returns title, severity, status, test name, and AI enrichment if available.

Get full details of a specific finding, including evidence, AI analysis, and recommended fix.

List incidents (grouped operational issues) across your targets. Filter by status. Returns title, severity, status, findings count, and deployment correlation.

Get full details of a specific incident including linked findings, AI analysis, and deployment correlation.

List recent test runs. Filter by target, status, or test slug. Returns run status, score, summary, duration, and finding count.

Get full details of a specific test run including metrics, score, summary, errors, and associated findings.

Get currently running and queued tests across all targets. Useful for checking what tests are in progress right now.

Get team-wide overview statistics: total runs, pass rate, open findings, open incidents, average duration. Supports lifetime, monthly, or weekly periods.

Get statistics for a specific target: runs, pass rate, findings, duration. Supports lifetime, monthly, or weekly periods.

Get daily time-series data for runs, findings, and average duration. Useful for identifying trends over time. Returns up to 90 days of data.

Get the latest crawl snapshot for a target. Returns page inventory stats, SEO issues, broken pages/assets, response times, and a diff against the previous crawl. Optionally include page-level details.

List maintenance windows for a target. Shows scheduled and recurring maintenance periods that suppress alerts.

List all available test definitions (plugins). Shows slug, name, category, runner type, weight class, schedule, and enablement status. Useful for knowing which tests can be triggered.

Run a specific test against a target. Specify either the test definition ID or slug. The test is queued and executed asynchronously — use get_run to check status.

Run all enabled tests against a target as a scan workflow. All tests in the target's test profile are queued. Returns the workflow ID and list of queued runs.

Acknowledge an open incident to signal that someone is looking at it. Changes status from OPEN to ACKNOWLEDGED.

Resolve an incident to mark it as handled. Changes status to RESOLVED and sets the closed timestamp.

Mute an open finding to suppress it from dashboards and alerts. Status changes from OPEN to MUTED.

Schedule a maintenance window for a target. During maintenance, alerts and notifications are suppressed. Supports one-time, daily, and weekly recurring windows.

Remove a scheduled maintenance window.

Record a deployment event for a target. Deployments are auto-correlated with incidents created within 20 minutes. Useful for tracking releases and root-cause analysis.

Force recompute all composite scores (Security, SEO, Performance, Accessibility) for a target. Useful after manual changes or when scores seem stale.

List all automation rules for the team. Rules automatically react to events (test failures, incidents, downtime) with configurable actions (escalate severity, suppress, rerun, webhook, notify).

Get full details of a specific automation rule.

Create an automation rule that reacts to events. Triggers: TEST_FAILED, TEST_RECOVERED, INCIDENT_CREATED, INCIDENT_RESOLVED, TARGET_DOWN, TARGET_RECOVERED. Actions: escalate (change severity), suppres…

Update an existing automation rule. Any field not provided will remain unchanged.

Permanently delete an automation rule.

List custom browser test flows (journeys) for a target or all team targets. Journeys are multi-step Playwright tests that verify user flows like checkout, login, and search.

Get full details of a specific journey including all steps.

Create a custom browser test flow for a target. Steps are executed sequentially in a Playwright browser. Supports actions: navigate, click, type, fill, select, assert, wait, screenshot, scroll, hover,…

Update a journey's name, settings, or steps. When steps are provided, all existing steps are replaced.

Permanently delete a journey and all its steps.

Execute a journey (custom browser test flow) against its target. The journey runs asynchronously — use get_run to check progress.

List all scheduled reports for the team. Reports are automatically generated and emailed on a daily or weekly basis.

Create a new scheduled email report. Reports include run stats, open findings, composite scores, and per-target status.

Update an existing scheduled report. Any field not provided stays unchanged.

Permanently delete a scheduled report.

Get the team's configuration including AI enrichment, uptime monitoring, severity escalation, run policies, notification coalescing, SEO, and Kloner Tasks integration settings.

Update team configuration. All fields are optional — only provided fields are changed. Covers: AI enrichment (model, temperature, auto-enrich, spending cap), uptime (timeout, thresholds), severity esc…

List all notification alert rules for the team. Rules map event types + severity levels to notification channels.

Create a notification alert rule. Defines which events at which severity levels trigger notifications on which channels. Supports quiet hours and per-target scoping.

Update a notification rule. Only provided fields are changed.

Permanently delete a notification rule.

List all notification channels (Email, Slack, Webhook, SMS, Web Push) configured for the team. Sensitive config values are redacted.

List all SEO keywords tracked for a target, including latest Google rank position. Max 50 per target.

Add an SEO keyword to track for a target. Max 50 keywords per target.

Remove an SEO keyword from a target.

Start a load test against a target. Max 100 concurrent connections, max 5 min duration, 1 test at a time per target, 60s cooldown between tests. Modes: HTTP_FLOOD (autocannon), BROWSER_USERS (Playwrig…

Cancel a running load test.

Get details and results of a load test run.

List recent load test runs for a target.

List secrets stored in a target's vault. Values are masked — only key names and labels are shown. Secrets are used by test plugins (e.g. LOGIN_EMAIL, LOGIN_PASSWORD for B2B shops, ga4_service_account …

Store an encrypted secret in a target's vault. Common keys: LOGIN_EMAIL, LOGIN_PASSWORD (B2B shop auth), ga4_service_account (GA4 monitoring). Values are AES-256-GCM encrypted at rest.

Update the value of an existing secret.

Permanently delete a secret from a target's vault.

List all reusable page fragments for the team. Fragments are shared step sequences (e.g. "Login", "Dismiss Cookies") that can be inserted into multiple Journeys via the use_fragment action.

Create a reusable step sequence that can be shared across multiple Journeys. Fragment names must be unique per team.

Update a page fragment. When steps are provided, all existing steps are replaced.

Permanently delete a page fragment.

Add a new website, API, or webshop target for monitoring with full onboarding. Automatically enables compatible tests, triggers an initial scan, and captures a page screenshot. Requires write scope (F…

Update a target's properties (name, URL, type, environment, business weight, tags, uptime toggle).

Permanently delete a target and all its associated data (runs, findings, incidents, artifacts). This cannot be undone.

Fingerprint a URL and get test recommendations before creating a target. Detects platform (Shopify, WordPress, etc.), CDN, server stack, frontend framework, analytics, and B2B/ecommerce signals. Retur…

Bulk import up to 100 websites for monitoring. Each URL gets a target created with auto-enabled tests, initial scan, and screenshot capture. Partial success — failed URLs are reported individually wit…

Create a rule to auto-mute findings matching a pattern. Existing open findings matching the rule are muted immediately. Supports muting by fingerprint pattern, test definition, or test+target combinat…

Get a comprehensive system health report: BullMQ queue depths, active/stuck runs, user sessions, notification delivery stats, and recent error counts. Requires admin scope.

Enable or disable a test definition globally, or update its schedule/timeout. Requires admin scope.

Enable all test definitions globally. Optionally filter by category to only enable tests in that category. Requires admin scope.

Disable all test definitions globally. Optionally filter by category to only disable tests in that category. Requires admin scope.

Walk from zero (guest scan or Free account) to a monitored target and first findings.