← All projects

Solo · Oct 2026 · live playground

Agency MCP Server: website audits for MCP clients

A read-only Model Context Protocol server with eight website-audit tools for an agency's client sites: page audits, structured data, crawler access, Core Web Vitals, a polite crawl, answerability scoring, Search Console and answer-engine visibility. Every tool is held to a per-client allowlist and fetches through an SSRF guard.

Live playgroundRecorded MCP sessionSource on GitHubFull write-up

What it shows

  • 8 tools and 88 tests, run in CI on Node 22 and 24 plus a Docker boot check. The playground calls the tools over Streamable HTTP against three demo sites.
  • The SSRF guard checks the address inside the socket's own DNS lookup, so private, link-local and CGNAT addresses are refused, including after redirects.
  • Search Console and the visibility check run on labelled fixture and mock data until real credentials exist. Visibility rates carry Wilson intervals, and changes are tested with Newcombe intervals against run-to-run variance.
  • TypeScript
  • MCP TypeScript SDK
  • Zod 4
  • Vitest
  • Docker
  • GitHub Actions

Files