RealMarket Site Check

Working · 199 ms Security A

com.realmarketlabs.tools/site-checkv2 Domain verified

Passive checks of a public website: email authentication (SPF, DKIM, DMARC) and basic security.

Security

Watch Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-04T17:41:01.813332Z",
      "publishedAt": "2026-11-04T17:41:01.813332Z",
      "statusChangedAt": "2026-11-04T17:41:01.813332Z"
    }
  },
  "server": {
    "name": "com.realmarketlabs.tools/site-check",
    "icons": [
      {
        "src": "https://realmarketlabs.com/static/apple-touch-icon.png",
        "sizes": [
          "180x180"
        ],
        "mimeType": "image/png"
      }
    ],
    "title": "RealMarket Site Check",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://tools.realmarketlabs.com/mcp/site-check",
        "type": "streamable-http"
      }
    ],
    "version": "2",
    "websiteUrl": "https://tools.realmarketlabs.com/",
    "description": "Passive checks of a public website: email authentication (SPF, DKIM, DMARC) and basic security."
  }
}

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://tools.realmarketlabs.com/mcp/site-check

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

check_ai_built_app Read-only

Reads the public pages and public JavaScript of a web app (typically built with Lovable, Bolt, v0, Replit or similar) and reports exposed API keys, public source maps, missing security headers, stale deploys, missing error monitoring and AI model calls made from the browser. Passive check: it never logs in, submits forms or probes private routes.

urlstring, required

Public address of the site to check, e.g. 'example.com' or 'https://example.com'.

languagestring

Language of the report: 'pt' (Portuguese) or 'es' (Spanish). Use the user's language; default 'pt'.

sends_user_data_to_aistring

Optional. Whether the user says the app sends its users' data to an AI model.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Run in a terminal

claude mcp add --transport http site-check https://tools.realmarketlabs.com/mcp/site-check

Try it

Call this server's tools from your browser. Nothing to install.

https://tools.realmarketlabs.com/mcp/site-check

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

check_ai_built_app Read-only

urlstring, required

Public address of the site to check, e.g. 'example.com' or 'https://example.com'.

languagestring

Language of the report: 'pt' (Portuguese) or 'es' (Spanish). Use the user's language; default 'pt'.

sends_user_data_to_aistring

Optional. Whether the user says the app sends its users' data to an AI model.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Run in a terminal

claude mcp add --transport http site-check https://tools.realmarketlabs.com/mcp/site-check

Tools (3)

check_ai_built_app

read-only

Argument	Type	Description
url*	string	Public address of the site to check, e.g. 'example.com' or 'https://example.com'.
language	string	Language of the report: 'pt' (Portuguese) or 'es' (Spanish). Use the user's language; default 'pt'.
sends_user_data_to_ai	string	Optional. Whether the user says the app sends its users' data to an AI model.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Public address of the site to check, e.g. 'example.com' or 'https://example.com'."
    },
    "language": {
      "enum": [
        "pt",
        "es"
      ],
      "type": "string",
      "description": "Language of the report: 'pt' (Portuguese) or 'es' (Spanish). Use the user's language; default 'pt'."
    },
    "sends_user_data_to_ai": {
      "enum": [
        "yes",
        "no",
        "unknown"
      ],
      "type": "string",
      "description": "Optional. Whether the user says the app sends its users' data to an AI model."
    }
  },
  "additionalProperties": false
}

check_site_email_security

Checks whether a domain's email is likely to reach the inbox (SPF, DKIM and DMARC records, mail servers) and whether the website has basic security in place (HTTPS, security headers, WordPress exposure, Lovable/Supabase setup). Reads only public DNS records and the public home page. The report is written in Portuguese.

read-only

Argument	Type	Description
url*	string	Public address of the site to check, e.g. 'example.com' or 'https://example.com'.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Public address of the site to check, e.g. 'example.com' or 'https://example.com'."
    }
  },
  "additionalProperties": false
}

diagnose_shopify_store

Reads the public pages of a Shopify store and reports whether it offers social login and a wishlist, how many products show as sold out, and whether it runs storefronts for several countries. Reads only public pages.

read-only

Argument	Type	Description
url*	string	Public address of the site to check, e.g. 'example.com' or 'https://example.com'.
language	string	Language of the report: 'pt' (Portuguese) or 'es' (Spanish). Use the user's language; default 'pt'.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Public address of the site to check, e.g. 'example.com' or 'https://example.com'."
    },
    "language": {
      "enum": [
        "pt",
        "es"
      ],
      "type": "string",
      "description": "Language of the report: 'pt' (Portuguese) or 'es' (Spanish). Use the user's language; default 'pt'."
    }
  },
  "additionalProperties": false
}

Try it

check_ai_built_app Read-only

Install

Try it

check_ai_built_app Read-only

Install

Tools (3)

Security checkA100/100