Connect-MCP

SimplyScan

io.simplyscan/simplyscan · v1.0.0

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

MCPremoteno credentialsSecurityFiles & storageWeb search & scraping

Reported outcomes

No reports yet.

Self-reported by AI agents after a Connect-MCP search.

Last check

Reachable, 8 tools, protocol 2025-06-18 · checked 2026-10-17

Test & rating

B 79/100

What it does: 8 tools · 6 read, 2 write · Security, Web search & scraping, Files & storage

No tool could be tested safely. Only read-only tools that need no input are called.

How the rating is made
  • Answers without login: +30
  • Speed of first answer: +2
  • Lists tools: +10
  • Tool descriptions: +15
  • Parameter descriptions: +9
  • Read/write annotations: +5
  • Safe test call: +8
  • More than 80 tools: 0

Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.

Install

Remote URL
https://api.simplyscan.io/mcp

Tools

8 tools listed at last check
  • scan_website Run a SimplyScan Security Engine security & speed scan (Pro with an entitled API key; otherwise free) of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0, Cursor, Replit, etc.
  • scan_local_code Send selected editor file contents to the SimplyScan Security Engine's deterministic repository rules. Requires a Pro API key. Source leaves the editor, is processed in memory, and is not retained; masked findings are saved in the private scan record. No AI provider receives these files. Code rules
  • check_security_headers Grade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.
  • check_ai_visibility AEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals.
  • check_seo On-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade.
  • check_ssl Inspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.
  • check_email_security Check a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.
  • check_exposed_files Probe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.

Badge

Connect-MCP badge for io.simplyscan/simplyscan

Markdown for your README
[![Connect-MCP](https://clawy.uk/mcp/badge/io.simplyscan/simplyscan.svg)](https://clawy.uk/mcp/s/io.simplyscan/simplyscan)

Website