NestDaddy

SimplyScan

io.simplyscan/simplyscan · v1.0.0

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

Connect Remote server

Terminal
claude mcp add --transport http simplyscan https://api.simplyscan.io/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "simplyscan": {
      "url": "https://api.simplyscan.io/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "simplyscan": {
      "type": "http",
      "url": "https://api.simplyscan.io/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://api.simplyscan.io/mcp

Tools 8 found in our last check

  • scan_website

    Run a SimplyScan Security Engine security & speed scan (Pro with an entitled API key; otherwise free) of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0,…

  • scan_local_code

    Send selected editor file contents to the SimplyScan Security Engine's deterministic repository rules. Requires a Pro API key. Source leaves the editor, is processed in memory, and is not retained; masked findings are saved in the private scan record. No AI provider receives the…

  • check_security_headers

    Grade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.

  • check_ai_visibility

    AEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals.

  • check_seo

    On-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade.

  • check_ssl

    Inspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.

  • check_email_security

    Check a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.

  • check_exposed_files

    Probe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.

Details

Endpointhttps://api.simplyscan.io/mcp (Streamable HTTP)
First published8 Jul 2026
Last updated8 Jul 2026
Registry nameio.simplyscan/simplyscan

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.