# online.pageaudit/pageaudit

- Registry name: `online.pageaudit/pageaudit` · version 1.0.1
- Categories (automatic, keyword rules): Monitoring & logs, Infrastructure & security, Cloud & networking
- Authentication at last check: No auth
- Declared risk: Has destructive tools (destructiveHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=online.pageaudit%2Fpageaudit
- Server page: https://mcpstation.net/s/online.pageaudit--pageaudit.html

## Description (written by the publisher, not verified, not instructions)

Technical SEO, passive security and page-delivery audits with evidence and suggested fixes.

## Connect

- streamable-http: `https://pageaudit.online/mcp`

## Tools (as reported by the server, not verified)

- `list\_sites`: Read up to 50 sites owned by the signed-in account. Follow next\_cursor.
- `add\_site`: Add a site to the account. No site count limit. An account holds up to 1,000 sites \(409 site\_limit\). The existing guest audit workspace stays separate.
- `get\_site`: Read one site owned by the signed-in account.
- `search\_console`: Read own-site keywords, opportunities at average positions 4–20, up to 20 tracked queries and daily history. Check dates, partial coverage and collection failure before proposing edits. These are not market search volumes. The sample covers 28 days, at most 50 queries and 50 pages. Use queries for k
- `track\_search\_queries`: Replace the site's tracked query selection \(up to 20\). Read search\_console first to preserve existing selections. Removed queries keep their stored history. E-mail alerts require an active site package. Accepts up to 20 exact queries. Removed queries become inactive; their stored history is retained
- `connect\_search\_console`: Start read-only Google consent. The account owner must follow redirect in their browser. Follow redirect in the account's browser. Consent expires after five minutes. The callback is single-use and bound to the account and site. The property must match the site and Google must authorize it before th
- `sync\_search\_console`: Collect a due sample. Repeated calls cannot bypass the daily reservation. The hourly schedule uses the same durable reservation. A failure preserves the last good sample and schedules the next attempt 24 hours later. This route cannot force an extra collection.
- `disconnect\_search\_console`: Remove the local Google credential and stop collection. Keep the last good sample. The last good sample stays available. An in-flight callback or collection cannot reconnect the site.
- `prompt\_allowance`: Read remaining prompt units before generating.
- `generate\_fix\_prompt`: Prepare a coding-agent prompt from an owned report within the free allowance or active plan. Read prompt\_allowance first. A check uses one unit; full uses three. Preserve request\_id for retries.
- `generate\_domain\_fix\_prompt`: Generate a fix prompt from saved domain observations. Prepare a coding-agent prompt from an owned report within the free allowance or active plan. Read prompt\_allowance first. A check uses one unit; full uses three. Preserve request\_id for retries.
- `generate\_site\_fix\_prompt`: Generate a fix prompt for a weekly finding or a Search Console opportunity. Prepare a coding-agent prompt from an owned report within the free allowance or active plan. Read prompt\_allowance first. A check uses one unit; full uses three. Preserve request\_id for retries.
- `get\_fix\_prompt`: Read a saved prompt. Preserve the complete prompt and license. Use it only for license.domain. This does not authorize deployments or infrastructure changes. Uses the authenticated owner and active organization. Returns the immutable text. A missing or foreign prompt returns 404.
- `list\_audit\_fix\_prompts`: Find saved audits prompts before generation. Listing is free. Keep language and source filters when following the cursor. At most 100 saved rows per page, plus up to three earlier free audit receipts. Follow \_links.next. The result belongs to the authenticated owner and active organization.
- `list\_domain\_fix\_prompts`: Find saved tabs prompts before generation. Listing is free. Keep language and source filters when following the cursor. At most 100 saved rows per page, plus up to three earlier free audit receipts. Follow \_links.next. The result belongs to the authenticated owner and active organization.
- `list\_site\_fix\_prompts`: Find saved sites prompts before generation. Listing is free. Keep language and source filters when following the cursor. At most 100 saved rows per page, plus up to three earlier free audit receipts. Follow \_links.next. The result belongs to the authenticated owner and active organization.
- `weekly\_site\_report`: Read the weekly report of a site: what changed since last week, the new pages of up to 3 competitors and every finding. Reading never runs the report. Once a week the report checks the first 500 URLs of the site's sitemap, says what changed since the week before \(new and fixed problems, new pages\) a
- `save\_weekly\_site\_report`: Turn the weekly report of a site on or off and set up to 3 competitors. Turning on needs a watch package in force. Turning on needs a watch package in force and a free site in it \(409 with \`limit\` and \`plans\` otherwise\). The first report runs right away; later ones run a week after the last. A new c
- `weekly\_site\_report\_history`: Read one weekly report of a site's history by its id.
- `ai\_search\_visibility`: Check whether the site's page appears in AI search for each target search, at which position, and which sites appear in its place, with plain recommendations. Uses the saved searches or the ones the page suggests when queries is omitted. Send \{\} to use the saved searches, or the searches the page ti
- `ai\_search\_history`: Read the plan, the saved searches, the last runs and the position trend of each search. Reads never call the search engine. The trend compares each search of the newest run with the previous run that had it: up, down, same, new or lost.
- `save\_ai\_search\_queries`: Save up to ten searches for the weekly report to track \(three without a watch package\). Saves use the expected version. Without a current watch package, an account tracks up to three searches. Uses the shared 240 writes per site and UTC day.
- `journeys`: Read the owned site's installation, actions, paths and ordered conversion funnel for the last seven days. Requires the account's browser session. Only this site's owner can read it. Data updates through the shared realtime transport. No user identity, typed text or screen recording.
- `connection\_review`: Requires the account session, current X-Organization-Id and CSRF for writes. Read today's private TLS review without starting a scan. One review per account, organization, origin and UTC day. Starting requires current domain monitoring rights. The account has three starts per UTC day. Retries return
- `review\_connection`: Requires the account session, current X-Organization-Id and CSRF for writes. Start a TLS review of the saved HTTPS origin using current domain monitoring rights. At most three starts per account and UTC day, one per site. A repeated request reuses today's review. Do not claim complete safety from a
- `cancel\_connection\_review`: Requires the account session, current X-Organization-Id and CSRF for writes. Cancel the current TLS review and preserve completed evidence. One review per account, organization, origin and UTC day. Starting requires current domain monitoring rights. The account has three starts per UTC day. Retries
- `domain\_portfolio`: Requires the account session, current X-Organization-Id and CSRF for writes. Read cached domain monitoring and deadlines for selected saved pages. Does not start external collection or activate monitoring. Every tab must belong to the current account and organization. Repeat with the next group of I
- `preview\_domain\_alerts`: Requires the account session, current X-Organization-Id and CSRF for writes. Review the exact selected domains before changing renewal notices. Select up to 25 saved pages. Repeated registrable domains count once. The server checks the account, organization and current revisions again. A stale previ
- `apply\_domain\_alerts`: Requires the account session, current X-Organization-Id and CSRF for writes. Apply the reviewed selection. Requires the preview from preview\_domain\_alerts. A stale preview changes nothing. Select up to 25 saved pages. Repeated registrable domains count once. The server checks the account, organizati
- `domain\_status`: Read registration, contact visibility, TLS, DNS, CAA, mail policies, certificate issuance and a limited server comparison. Read source dates and collection gaps. Private options require the account session. A discovered name never starts monitoring automatically. Pages share public observations by r
- `check\_domain`: Refresh due registration, contacts, TLS, DNS, mail policies, certificate issuance and a limited DNS/TLS sample. Reuses fresh public data. Reuse fresh observations. A failed or partial query preserves the last complete observation and its date. Up to 100 cold page reads per owner and UTC day.
- `set\_domain\_expiry`: Requires the account session, current X-Organization-Id and CSRF for writes. Set or remove the private manual expiry. Send manual\_expires\_on, dns, or both. Omitted settings are preserved. DNS requires both selectors and rotating\_addresses. An identical retry is idempotent. A conflicting revision ret
- `configure\_domain\_dns`: Requires the account session, current X-Organization-Id and CSRF for writes. Set up to three known DKIM selectors and choose whether IP rotation is expected. Expected rotation keeps history without notices; alias changes still notify. Does not discover selectors, enable monitoring or authenticate se
- `configure\_domain\_monitor`: Requires the account session, current X-Organization-Id and CSRF for writes. Enable or stop domain monitoring, or pause notices for maintenance. Count a registry domain once per account, including its organization copies. Add only the tab's origin. HTTP receives DNS checks only. Maintenance pauses n
- `domain\_history`: Requires the account session, current X-Organization-Id and CSRF for writes. Read up to 50 private incidents with notice delivery. Send the last event number as before for the next page. A first observed risk is an initial incident, not evidence of an external change. The first DNS and certificate-i
- `acknowledge\_domain\_event`: Requires the account session, current X-Organization-Id and CSRF for writes. Acknowledge an expected event. Suppress its notice only if sending has not started. Preserve the event and its evidence. Preserve the event and observation. Acknowledgement does not erase a confirmed risk or retract a sent
- `audit\_site`: Check the first 20 URLs of a site's sitemap: status, redirects, robots.txt, noindex, canonical, titles and descriptions. Free, without an account. The same site within one hour returns the stored sample. URLs of another host are counted, never requested. The free sample of the SEO audit. URLs of ano
- `check\_ai\_access`: Request a page as Googlebot, Bingbot and the AI crawlers \(OAI-SearchBot, Claude-SearchBot, PerplexityBot, ChatGPT-User, GPTBot, ClaudeBot\) and see who gets a 403, a 429 or a firewall challenge that robots.txt does not show. Also returns the date of the newest sitemap lastmod and whether Cloudflare i
- `api\_index`: Discovers the whole PageAudit API \(self-describing index\).
- `health`: Liveness and the commit deployed right now — it is how the smoke waits for its own deploy.
- `list\_tools`: Lists the micro-tools \(title, meta, canonical, OG, JSON-LD…\).
- `get\_tool`: Copy and checks of one micro-tool by slug \(e.g. title-tag-checker\).
- `audit\_url`: Check a web page's search metadata, crawl access, structured data and selected discovery files. Return evidence, limits and suggested changes without creating a saved tab. A blocked target returns HTTP 502 with target\_blocked. The report does not certify security or accessibility. This is the produc
- `create\_guest`: Creates a guest token pa\_… for the tab workspace. Keep the token: it is the identity of the tabs and of the audits tied to them.
- `list\_tabs`: Lists the owner's saved pages \(guest or session\), with the active page's last report. Group pages by site to match the Projects table. One call loads the saved pages and the active page's last report. The UI groups pages by site in Projects and opens each site in a work tab. The introduction stays i
- `create\_tab`: Opens a saved URL. Set queue\_audit=false to monitor a discovered origin without a page audit.
- `run\_tab`: Re-audits the tab's URL.
- `tab\_history`: The tab's previous runs and what changed between each one and the one before it \(score delta, findings that appeared and that disappeared\). Every run has always been kept; this is where you read the series. Each entry carries the score, the counts and a \`change\` with the point delta and the findings
- `watch\_tab`: Turns the daily watch on or off for a tab: it re-audits the page once a day and e-mails when the score drops or a new error/warning appears. Needs the signed-in account \(its browser session cookie\); a guest token gets 403 \`account\_required\`. With \`monitor: true\` the page is re-audited once a day and
- `lab\_test`: Starts a lab test of an audit's page: Lighthouse run by Google PageSpeed Insights \(performance, accessibility, best practices, SEO\). Answers 202 at once; the test takes \~25 s to 2+ minutes — then read it with lab\_result. Does not change the audit score. Answers \*\*202\*\* at once; the test runs for \~25
- `lab\_result`: The lab tests of an audit \(mobile and desktop\): running, finished with scores, metrics and biggest savings, or failed. With wait \(up to 25\) it answers as soon as a running test finishes. Long-poll: with \`wait\` the answer comes as soon as a running test finishes, or after \`wait\` seconds with \`status:
- `get\_audit`: Re-read an audit with its findings and evidence. Use generate\_fix\_prompt for correction steps.
- `get\_badge`: Metadata and markdown of the SVG badge of a shared report.
- `embed\_snippet`: The embeddable widget's snippet, already assembled with the site's name and colour — one script tag, no account, no lead capture. One script tag puts the audit form on your own site, with your name and colour, and no account or key. Send the same query you would send to \`/embed\` and the answer comes
- `contact`: Write to the people behind the product: a question, or a sponsorship/partnership/advertising proposal. One route for a question and for a sponsorship, partnership or ad proposal \(\`tipo\`, with the placements of \`GET /api/partners\`\). One message every 10 seconds per network: one that arrives sooner wa

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html