Web Scan MCP Server

by ankitkumarjha515 Your server? Claim it

answering

Web Scan is answering right now. Last checked 1 min ago. It exposes 3 tools. Last commit 21 Oct 2026.

Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.

Uptime history 5 days of history

5 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

949 ms

Response time

average over 24h

Stars

last commit 21 Oct 2026

Nothing serious here today

Today is the operative word: we check Web Scan every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 1 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add web-scan --transport http https://preflight-api.agentmarket.lol/api/mcp

Settings → Connectors → Add custom connector, then paste this address

https://preflight-api.agentmarket.lol/api/mcp

~/.codex/config.toml

[mcp_servers.web-scan]
url = "https://preflight-api.agentmarket.lol/api/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "web-scan": {
      "url": "https://preflight-api.agentmarket.lol/api/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "web-scan": {
      "type": "http",
      "url": "https://preflight-api.agentmarket.lol/api/mcp"
    }
  }
}

Available tools 3

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

report

get_report

Read a stored Web Scan report by its slug (the part after /r/ in a web-scan.agentmarket.lol/r/<slug> link) without re-scanning: score, grade, scan time and the failing or warning checks with fixes. Use this when the user shares a report link. Reports expire after two weeks; to check the current state of a site, use scan_url or verify_fixes instead.

scan

scan_url

Run a fresh Web Scan audit of a public URL and return its score (0-100), grade, and every failing or warning check with its id, title and fix: the result is complete in itself. reportUrl is a shareable link only when the request carries a signed-in Web Scan token (reports are saved for signed-in users only); otherwise it is null and nothing is stored. fullReportUrl is always present: the full report on the website, to share with the user. Use this first, to find out what to fix on a live page. Takes about 5-15 seconds. Cannot scan localhost or private networks; use a deployed or preview URL.

verify

verify_fixes

Re-scan a URL after you deployed fixes and report, per check id, whether it now passes (fixed: true), plus the new score, the previous score, what is still failing with its fix, and allFixed. Use this after a change reaches production (or a public preview) instead of asking the user to re-scan. Pass the check ids from the scan or fix prompt; with none, every failing or warning check is returned. If a fix you made still shows fixed: false, the deploy may not be live yet or a CDN may be serving a cached page: wait about a minute and call again before concluding the fix failed.

Endpoints

URL	Transport	State	Latency	Checked
https://preflight-api.agentmarket.lol/api/mcp	streamable-http	answering	965 ms	1 min ago

Alternatives to Web Scan

same job, measured the same way

scorebadge

by scorebadge

Free website score for speed, SEO, security and AI search readiness, with the fixes.

answering

MCP Codeaudit

by infoinlet-marketplace

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

15 installs/wk local only

Arbiter

by arbiterscan

Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.

answering

Pageaudit

by pageaudit

Technical SEO, passive security and page-delivery audits with evidence and suggested fixes.

55 tools answering

SimplyScan

by simplyscan

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

8 tools answering

AstraVerify Domain Trust Check

by astraverify

Email security and AI discoverability scores for any domain, with the exact record or tag to fix.

5 tools answering

Vet

by getvet

Discover and vet MCP servers: search 200K+ AI tools with security verification and schemas.

26 installs/wk local only

SecScan

by secscan

Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.

12 tools answering

Web Scan — questions

Answers built from our own checks of this server.

What can Web Scan do?

It exposes 3 tools, read directly from the server on our last check. Among them: get_report, scan_url, verify_fixes. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Web Scan working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 949 ms. The bar chart above shows every period we have measured.

How do I connect Web Scan?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Web Scan need an API key?

No. Web Scan completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 3 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Web Scan?

It answers our handshake in 949 ms on average, which is faster than 7% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Web Scan open source?

The code is open source: it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The licence covers the code in the repository, not the hosted service at preflight-api.agentmarket.lol, which runs on its operator's own terms.