Back to search
100
MCP live MCP 2025-11-25 streamable-http

SimplyScan

io.simplyscan/simplyscan

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

Watch this dependency

Get before/after evidence when observed tools, schemas, authentication access, availability or the endpoint changes.

Inspect evidence and set up a watch Share public evidence report
Uptime
100.0%
5 direct probes · 30d
Response
4630ms
last probe
Tools
8
callable
Resources
0
readable
Prompts
0
available
Primary URL
https://api.simplyscan.io/mcp
Score: 100/100
Handshake verified by our own probe.
why this score
pass Answers the MCP handshake 50/50
The handshake and the list calls succeeded on the primary URL.
pass Lists tools, resources or prompts 30/30
8 tools, 0 resources, 0 prompts returned.
pass 3 or more catalogue items 10/10
8 items in total; 3 or more earns these points.
pass Describes itself 10/10
93 characters; more than 30 earns these points.

Tools · 8

scan_website

Run a SimplyScan Security Engine security & speed scan (Pro with an entitled API key; otherwise free) of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase R…

scan_local_code

Send selected editor file contents to the SimplyScan Security Engine's deterministic repository rules. Requires a Pro API key. Source leaves the editor, is processed in memory, and is not retained; ma…

check_security_headers

Grade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.

check_ai_visibility

AEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals.

check_seo

On-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade.

check_ssl

Inspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.

check_email_security

Check a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.

check_exposed_files

Probe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.

How to use

Add to your Claude Desktop / Cursor / Cline MCP config:

{
  "mcpServers": {
    "simplyscan": {
      "url": "https://api.simplyscan.io/mcp",
      "transport": "streamable-http"
    }
  }
}