HolicAudit website checks

Working · 70 ms Security A

dev.huutran.audit/website-checksv1.0.0 Domain verified

Free SEO, AI visibility (AI crawlers, llms.txt, JSON-LD) and security-header checks for any URL.

Marketing & SEO Security

Watch Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-10T08:19:01.551989Z",
      "publishedAt": "2026-11-10T08:19:01.551989Z",
      "statusChangedAt": "2026-11-10T08:19:01.551989Z"
    }
  },
  "server": {
    "name": "dev.huutran.audit/website-checks",
    "title": "HolicAudit website checks",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://audit.huutran.dev/mcp",
        "type": "streamable-http"
      }
    ],
    "version": "1.0.0",
    "websiteUrl": "https://audit.huutran.dev/mcp-server",
    "description": "Free SEO, AI visibility (AI crawlers, llms.txt, JSON-LD) and security-header checks for any URL."
  }
}

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://audit.huutran.dev/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

ai_visibility_check Read-only

Checks whether AI crawlers and AI search tools (ChatGPT, Claude, Perplexity, Google AI Overviews, Copilot) can read and cite a public URL: robots.txt rules for GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, PerplexityBot, Google-Extended, CCBot, Applebot-Extended and Bytespider; text and H1 in the raw server HTML; llms.txt and llms-full.txt; JSON-LD types; title, description, Open Graph, canonical, sitemap; nosnippet/noindex; and whether an MCP server card or AI catalog is published. Returns a 0-100 score and fixes.

urlstring, required

Public web page to check, e.g. example.com or https://example.com/pricing

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Run in a terminal

claude mcp add --transport http website-checks https://audit.huutran.dev/mcp

Tools (6)

Tool list last changed Nov 10, 2026.

ai_visibility_check

read-only

Argument	Type	Description
url*	string	Public web page to check, e.g. example.com or https://example.com/pricing

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Public web page to check, e.g. example.com or https://example.com/pricing"
    }
  },
  "additionalProperties": false
}

bulk_check

Quick on-page check of up to 10 URLs in one call: HTTP status, title, meta description, H1, canonical, noindex, lang, Open Graph and thin content. Requires a paid API key (Authorization: Bearer <key>, $15 per 3 months): https://audit.huutran.dev/mcp-server#pro

read-only

Argument	Type	Description
urls*	array	Public URLs

Input schema (JSON)

{
  "type": "object",
  "required": [
    "urls"
  ],
  "properties": {
    "urls": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "maxItems": 10,
      "minItems": 1,
      "description": "Public URLs"
    }
  },
  "additionalProperties": false
}

compare_competitors

Side-by-side on-page, AI-crawler and security-header signals for your page and up to 3 competitor pages: response time, title and description length, H1, word count, JSON-LD types, llms.txt, AI crawlers blocked in robots.txt, security headers. No backlink or domain-authority metrics. Requires a paid API key (Authorization: Bearer <key>, $15 per 3 months): https://audit.huutran.dev/mcp-server#pro

read-only

Argument	Type	Description
url*	string	Your page
competitors*	array	Competitor pages

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url",
    "competitors"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Your page"
    },
    "competitors": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "maxItems": 3,
      "minItems": 1,
      "description": "Competitor pages"
    }
  },
  "additionalProperties": false
}

full_site_crawl

Crawls up to 25 pages of a public site (from its XML sitemap, or homepage links) and checks each for title, meta description, H1, canonical, noindex, html lang, Open Graph, thin content and HTTP errors, plus site-wide duplicate titles and descriptions. Requires a paid API key (Authorization: Bearer <key>, $15 per 3 months): https://audit.huutran.dev/mcp-server#pro

read-only

Argument	Type	Description
url*	string	Site or homepage, e.g. example.com
max_pages	integer	Pages to check (1-25, default 10)

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Site or homepage, e.g. example.com"
    },
    "max_pages": {
      "type": "integer",
      "default": 10,
      "maximum": 25,
      "minimum": 1,
      "description": "Pages to check (1-25, default 10)"
    }
  },
  "additionalProperties": false
}

security_headers_check

Passive security check of one public URL: one ordinary page load plus public DNS. Grades HTTPS, HSTS, Content-Security-Policy, clickjacking protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, version-leaking headers, cookie flags, SPF, DMARC, DKIM, CAA and DNSSEC from A to F, with a fix for each issue. Not a vulnerability scan.

read-only

Argument	Type	Description
url*	string	Public web page to check, e.g. example.com or https://example.com/pricing

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Public web page to check, e.g. example.com or https://example.com/pricing"
    }
  },
  "additionalProperties": false
}

seo_check

On-page SEO check of one public URL: title, meta description, H1, canonical, Open Graph, lang, viewport, noindex, word count and empty JavaScript app shells, robots.txt, XML sitemap, HTTPS, server response time and HTML size. Returns a 0-100 score and a plain-English fix for each issue.

read-only

Argument	Type	Description
url*	string	Public web page to check, e.g. example.com or https://example.com/pricing

Input schema (JSON)

{
  "type": "object",
  "required": [
    "url"
  ],
  "properties": {
    "url": {
      "type": "string",
      "description": "Public web page to check, e.g. example.com or https://example.com/pricing"
    }
  },
  "additionalProperties": false
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 10, 2026.

Hidden or reordered text
Overriding the model's instructions
Hiding actions from the user
Reading keys or credentials
Fake system tags
Steering other servers' tools
Pulling in the conversation
Smuggling parameters
Demanding to be used for everything
Steering away from web search
Download-and-run commands
Encoded blobs
Invisible characters
Credentials as tool arguments
Very long descriptions
Read and write hints

How the security check works

Tool changes

What changed in this server's tools since we started watching, newest first. Each change is scanned again.

bulk_checkaddedNov 10, 2026
Quick on-page check of up to 10 URLs in one call: HTTP status, title, meta description, H1, canonical, noindex, lang, Open Graph and thin content. Requires a paid API key (Authorization: Bearer <key>, $15 per 3 months): https://audit.huutran.dev/mcp-server#pro
compare_competitorsaddedNov 10, 2026
Side-by-side on-page, AI-crawler and security-header signals for your page and up to 3 competitor pages: response time, title and description length, H1, word count, JSON-LD types, llms.txt, AI crawlers blocked in robots.txt, security headers. No backlink or domain-authority metrics. Requires a paid API key (Authorization: Bearer <key>, $15 per 3 months): https://audit.huutran.dev/mcp-server#pro
full_site_crawladdedNov 10, 2026
Crawls up to 25 pages of a public site (from its XML sitemap, or homepage links) and checks each for title, meta description, H1, canonical, noindex, html lang, Open Graph, thin content and HTTP errors, plus site-wide duplicate titles and descriptions. Requires a paid API key (Authorization: Bearer <key>, $15 per 3 months): https://audit.huutran.dev/mcp-server#pro