MCP Tools Reference

#scan_website

Run a passive security scan on a URL. Optionally trigger an active scan.

{
  "url": "https://example.com",       // Required: target URL
  "active": false,                     // Optional: trigger active scan (default: false)
  "profile": true                      // Optional: run tech profiling (default: true)
}

scan_website(url="https://example.com")

#get_scan_results

Fetch scan results by ID. Includes findings, check results, and AI prompts.

get_scan_results(scan_id="550e8400-...")

#list_scans

List all your scans, newest first.

list_scans()

#profile_site

Detect technologies, frameworks, CDNs, and more.

profile_site(url="https://example.com")

#performance_check

Run performance analysis. Returns Core Web Vitals and optimization opportunities.

{
  "url": "https://example.com",
  "mode": "desktop"       // "desktop" (default) or "mobile"
}

#seo_check

Analyze SEO or AEO compliance.

{
  "url": "https://example.com",
  "mode": "seo"           // "seo" or "aeo"
}

#accessibility_check

WCAG 2.1 AA audit using axe-core.

accessibility_check(url="https://example.com")

#deliverability_check

Email DNS authentication checks (SPF, DKIM, DMARC, etc.).

{
  "domain": "example.com"    // Domain to check (not URL)
}

#list_integrations

List connected provider integrations and their status.

list_integrations()

#scan_integrations

Run security analysis on connected integrations.

{
  "provider": "github"    // Optional: scan one provider, or omit for all
}

#issue_badge

Issue a Verified badge for a project. Runs a scan first if needed.

issue_badge(project_id="...")

#verify_badge

Verify a badge JWT token. Returns badge status, expiry, and project info.

{
  "token": "eyJhbGci..."    // The badge JWT token
}