All servers · Marketing & SEO · Code & repositories

SimplyScan

io.simplyscan/simplyscan · v1.0.0

Tools changed (7 days)No registry update 90+ days

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2025-06-18
Rank score	—
Declared risk	Can write (some tools are not declared read-only)
Capabilities declared	tools
Tool definitions	8 tools · with description 100% · input schema is an object 100% · read/destructive hints 100%

Description written by the publisher, not verified

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

Connect

streamable-http · https://api.simplyscan.io/mcp

claude mcp add --transport http simplyscan https://api.simplyscan.io/mcp

{
  "mcpServers": {
    "simplyscan": {
      "url": "https://api.simplyscan.io/mcp"
    }
  }
}

Tools as reported by the server

scan_website
Run a SimplyScan Security Engine security & speed scan (Pro with an entitled API key; otherwise free) of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0, Cursor, Replit, etc.
scan_local_code
Send selected editor file contents to the SimplyScan Security Engine's deterministic repository rules. Requires a Pro API key. Source leaves the editor, is processed in memory, and is not retained; masked findings are saved in the private scan record. No AI provider receives these files. Code rules
check_security_headers
Grade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.
check_ai_visibility
AEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals.
check_seo
On-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade.
check_ssl
Inspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.
check_email_security
Check a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.
check_exposed_files
Probe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.

Tool changes

2026-10-17: scan_website, scan_local_code, check_security_headers, check_ai_visibility, check_seo, check_ssl, check_email_security, check_exposed_files
2026-10-16: scan_website, check_security_headers, check_ai_visibility, check_seo, check_ssl, check_email_security, check_exposed_files

Website · JSON · Text for agents · Registry updated 2026-07-08