Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
Connect Remote server
claude mcp add --transport http simplyscan https://api.simplyscan.io/mcp
{
"mcpServers": {
"simplyscan": {
"url": "https://api.simplyscan.io/mcp"
}
}
}
{
"servers": {
"simplyscan": {
"type": "http",
"url": "https://api.simplyscan.io/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://api.simplyscan.io/mcp
Tools 8 found in our last check
scan_websiteRun a SimplyScan Security Engine security & speed scan (Pro with an entitled API key; otherwise free) of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0,…
scan_local_codeSend selected editor file contents to the SimplyScan Security Engine's deterministic repository rules. Requires a Pro API key. Source leaves the editor, is processed in memory, and is not retained; masked findings are saved in the private scan record. No AI provider receives the…
check_security_headersGrade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.
check_ai_visibilityAEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals.
check_seoOn-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade.
check_sslInspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.
check_email_securityCheck a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.
check_exposed_filesProbe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.
Details
| Endpoint | https://api.simplyscan.io/mcp (Streamable HTTP) |
| First published | 8 Jul 2026 |
| Last updated | 8 Jul 2026 |
| Registry name | io.simplyscan/simplyscan |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
