Free read-only teardown of a public site's money path, with the dollar at risk.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Returns the most recent revenue-path check for a given site, including its dollar-proof findings. Reads an account history, so it needs a Smoke Run API key. Returns an empty result when no check has been run for that site yet.
A public website address, for example https://example.com.
Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.
Run in a terminal
claude mcp add --transport http smoke-run https://getsmokerun.com/api/mcp
Returns the most recent revenue-path check for a given site, including its dollar-proof findings. Reads an account history, so it needs a Smoke Run API key. Returns an empty result when no check has been run for that site yet.
| Argument | Type | Description |
|---|---|---|
| siteUrl* | string | A public website address, for example https://example.com. |
{
"type": "object",
"required": [
"siteUrl"
],
"properties": {
"siteUrl": {
"type": "string",
"maxLength": 2048,
"description": "A public website address, for example https://example.com."
}
},
"additionalProperties": false
}Detects the revenue stack a public site runs on (payment processor, CRM or lead destination, email provider, booking tool, analytics and ad pixels) from its public page, and returns the funnel map. Free and needs no key. Each node notes what a connected check can verify end to end.
| Argument | Type | Description |
|---|---|---|
| url* | string | A public website address, for example https://example.com. |
| api_key | string | Optional. A Smoke Run API key. It lifts the free daily limit and is not required for a single check. |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"maxLength": 2048,
"description": "A public website address, for example https://example.com."
},
"api_key": {
"type": "string",
"maxLength": 200,
"description": "Optional. A Smoke Run API key. It lifts the free daily limit and is not required for a single check."
}
},
"additionalProperties": false
}Lists recent revenue-path checks for the authenticated account, newest first. An optional siteUrl narrows the list to one site.
| Argument | Type | Description |
|---|---|---|
| limit | integer | Optional. Max rows. |
| siteUrl | string | Optional. Narrow the list to one site. |
{
"type": "object",
"properties": {
"limit": {
"type": "integer",
"maximum": 100,
"minimum": 1,
"description": "Optional. Max rows."
},
"siteUrl": {
"type": "string",
"maxLength": 2048,
"description": "Optional. Narrow the list to one site."
}
},
"additionalProperties": false
}Runs a read-only, from-outside revenue-path teardown of a public website and returns a dollar-proof report. Free and needs no key. It loads the site as a visitor, follows the money path (landing, call to action, lead form, checkout reachability, analytics presence), and reports where revenue is at risk. Each finding carries a confidence label: confirmed means it was reproduced from outside, likely means it was inferred from the public page, and unverifiable from outside means only a connected check can confirm it. Dollar figures are a conservative monthly floor and attach only to confirmed or likely findings. It never submits a form and never completes a charge.
| Argument | Type | Description |
|---|---|---|
| url* | string | A public website address, for example https://example.com. |
| api_key | string | Optional. A Smoke Run API key. It lifts the free daily limit and is not required for a single check. |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"maxLength": 2048,
"description": "A public website address, for example https://example.com."
},
"api_key": {
"type": "string",
"maxLength": 200,
"description": "Optional. A Smoke Run API key. It lifts the free daily limit and is not required for a single check."
}
},
"additionalProperties": false
}We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 4, 2026.
Takes a password, API key or token as an argument, so the secret passes through the model's context and chat logs.
Fix: Read credentials from the server's own configuration (environment, OAuth) instead of a tool argument.