CookieInspector

Working · 2.9 s

com.cookieinspector/cookieinspectorv1.0.0 Domain verified

Check what a site's cookie banner really blocks: CMP, trackers, cookies before consent.

Legal & Government

Website Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://api.cookieinspector.com/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

explain_finding Read-only

Explain a CookieInspector finding code (e.g. THIRD_PARTY_PRE_CONSENT) or what to check in a named consent platform (e.g. Cookiebot). No network call. Technical findings, not legal advice.

codestring, required

A finding code from a report, such as COOKIES_BEFORE_CONSENT, or a consent platform name such as OneTrust

Tools (9)

explain_finding

Explain a CookieInspector finding code (e.g. THIRD_PARTY_PRE_CONSENT) or what to check in a named consent platform (e.g. Cookiebot). No network call. Technical findings, not legal advice.

read-only

Argument	Type	Description
code*	string	A finding code from a report, such as COOKIES_BEFORE_CONSENT, or a consent platform name such as OneTrust

Input schema (JSON)

{
  "type": "object",
  "required": [
    "code"
  ],
  "properties": {
    "code": {
      "type": "string",
      "description": "A finding code from a report, such as COOKIES_BEFORE_CONSENT, or a consent platform name such as OneTrust"
    }
  }
}

get_capabilities

Describe what CookieInspector checks on a website (cookies and trackers before and after the consent click, banner behaviour, consent platform, Google Consent Mode), which tools work without an account, which need a CookieInspector API key, and the quotas. Call this first when unsure which tool to use. Technical findings, not legal advice.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {}
}

get_prescan_result

Return the result of a pre-scan started with prescan_site: riskScore (0 best, 100 worst, the same scale as the full report), risk level, how many cookies load before consent, up to five trackers by name, the consent platform and its confidence, Google Consent Mode status, three findings, and the report link. This is a header-and-HTML pre-scan, single page; the full scan with a real browser, evidence and fix guide requires a CookieInspector account. Technical findings, not legal advice.

read-only

Argument	Type	Description
preScanId*	string	The preScanId returned by prescan_site

Input schema (JSON)

{
  "type": "object",
  "required": [
    "preScanId"
  ],
  "properties": {
    "preScanId": {
      "type": "string",
      "description": "The preScanId returned by prescan_site"
    }
  }
}

get_scan_findings

The findings of a scan on the connected account, with severity, the affected resource and the recommendation, up to 25. Use explain_finding for what a code means. Technical findings, not legal advice.

read-only

Argument	Type	Description
scanId*	string	The scanId returned by start_scan or list_scans

Input schema (JSON)

{
  "type": "object",
  "required": [
    "scanId"
  ],
  "properties": {
    "scanId": {
      "type": "string",
      "description": "The scanId returned by start_scan or list_scans"
    }
  }
}

get_scan_status

Status of a scan on the connected account: queued, running, completed or failed, with the riskScore (0 best, 100 worst) once done. Technical findings, not legal advice.

read-only

Argument	Type	Description
scanId*	string	The scanId returned by start_scan or list_scans

Input schema (JSON)

{
  "type": "object",
  "required": [
    "scanId"
  ],
  "properties": {
    "scanId": {
      "type": "string",
      "description": "The scanId returned by start_scan or list_scans"
    }
  }
}

get_scan_summary

Summary of a completed scan on the connected account: risk score (0 best, 100 worst), verdict, banner and consent platform, cookie and tracker counts, the top issues and the report link. Technical findings, not legal advice.

read-only

Argument	Type	Description
scanId*	string	The scanId returned by start_scan or list_scans

Input schema (JSON)

{
  "type": "object",
  "required": [
    "scanId"
  ],
  "properties": {
    "scanId": {
      "type": "string",
      "description": "The scanId returned by start_scan or list_scans"
    }
  }
}

list_scans

The most recent scans on the connected account, newest first (up to 20), each with its riskScore (0 best, 100 worst). Technical findings, not legal advice.

read-only

Argument	Type	Description
limit	integer \| null	How many to return, 1 to 20. Default 10.

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "limit": {
      "type": [
        "integer",
        "null"
      ],
      "default": null,
      "description": "How many to return, 1 to 20. Default 10."
    }
  }
}

prescan_site

Start a quick, anonymous pre-scan of a public website's home page: HTTP headers and HTML only, no real browser. Returns a preScanId to pass to get_prescan_result and a link to the report on cookieinspector.com. CookieInspector works alongside any consent platform; it checks what the banner actually does. Technical findings, not legal advice.

Argument	Type	Description
url*	string	The website to check, e.g. example.com or https://example.com

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "The website to check, e.g. example.com or https://example.com"
    }
  }
}

start_scan

Start a full CookieInspector scan with a real browser (before and after the consent click, up to 5 pages) on the connected account. Optional region: main (US East), us-west, eu-de (Germany, for EU-targeted banners). Uses the plan's monthly scans. Returns a scanId to poll with get_scan_status, then get_scan_summary. Technical findings, not legal advice.

Argument	Type	Description
url*	string	The website to scan, absolute, e.g. https://example.com
region	string \| null	Scan location: main, us-west or eu-de
evaluateCcpa	boolean \| null	Also evaluate CCPA/CPRA (California). Default true.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "The website to scan, absolute, e.g. https://example.com"
    },
    "region": {
      "type": [
        "string",
        "null"
      ],
      "default": null,
      "description": "Scan location: main, us-west or eu-de"
    },
    "evaluateCcpa": {
      "type": [
        "boolean",
        "null"
      ],
      "default": null,
      "description": "Also evaluate CCPA/CPRA (California). Default true."
    }
  }
}