SimplyScan
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
Connect it
Settings → Connectors → Add custom connector
URL: https://api.simplyscan.io/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://api.simplyscan.io/mcp{
"mcpServers": {
"simplyscan": {
"url": "https://api.simplyscan.io/mcp"
}
}
}claude mcp add --transport http simplyscan https://api.simplyscan.io/mcp{
"servers": {
"simplyscan": {
"type": "http",
"url": "https://api.simplyscan.io/mcp"
}
}
}8 tools, verified live
scan_websiteRun a SimplyScan Security Engine security & speed scan (Pro with an entitled API key; otherwise free) of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0, Cursor, Replit, etc.
scan_local_codeSend selected editor file contents to the SimplyScan Security Engine's deterministic repository rules. Requires a Pro API key. Source leaves the editor, is processed in memory, and is not retained; masked findings are saved in the private scan record. No AI provider receives these files. Code rules analyse JavaScript and TypeScript; other files are checked for secrets only. When no file can be ana
check_security_headersread-onlyGrade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.
check_ai_visibilityread-onlyAEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals.
check_seoread-onlyOn-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade.
check_sslread-onlyInspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.
check_email_securityread-onlyCheck a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.
check_exposed_filesread-onlyProbe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.
Alternatives in Marketing & SEO
Compare →
App Store Trends MCPB
App Store and Play downloads and charts over time, Android uses bundle ID. Free key at trendsmcp.ai
npm Trends MCPB
npm package trends and weekly downloads over time. Free key at trendsmcp.ai
WAWP Agent - WordPress publishing & management with ClaudeB
WordPress MCP server: publish posts, AI images, SEO and full site management, self-hosted
OnPage.devB
Free SEO MCP that closes the loop: find, fix, ship as a PR or to a CMS, prove. 37 tools, no key.
VAVISEON AskB
VISEON's Schema.org knowledge graph: products, services, people, FAQs and terms, from viseon.io
FFFlaim FantasyB
Fantasy analysis for your ESPN, Yahoo, and Sleeper leagues. Reads your leagues, never changes them.