eu.cookierisk/quickscanv1.0.1 Domain verified
Scan a public homepage for cookies and tracking observed before consent interaction.
Maintained by@whitesearch(verified)Also a maintainer?
Try it
Call this server's tools from your browser. Nothing to install.
https://cookierisk.eu/mcp
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
get_quickscan_result Read-only
Use the scanId returned by start_quickscan to retrieve progress or sanitized findings, including the visible banner provider and controls, CookieRisk score, pre-consent tracking status, tag or service classifications, browser-recorded initiator hosts and consent signals when available. Page settings and scan-wide network signals are separate. A request in a tracking category alone is not confirmation. Observe pollAfterSeconds before polling and retryAfter on an error. Unknown, incomplete and failed scans do not establish absence of tracking. Accept and reject behavior is outside the scan scope.
The scanId returned by start_quickscan.
Install
Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.
Run in a terminal
claude mcp add --transport http quickscan https://cookierisk.eu/mcp
Tools (2)
get_quickscan_resultUse the scanId returned by start_quickscan to retrieve progress or sanitized findings, including the visible banner provider and controls, CookieRisk score, pre-consent tracking status, tag or service classifications, browser-recorded initiator hosts and consent signals when available. Page settings and scan-wide network signals are separate. A request in a tracking category alone is not confirmation. Observe pollAfterSeconds before polling and retryAfter on an error. Unknown, incomplete and failed scans do not establish absence of tracking. Accept and reject behavior is outside the scan scope.
read-only
get_quickscan_result
Use the scanId returned by start_quickscan to retrieve progress or sanitized findings, including the visible banner provider and controls, CookieRisk score, pre-consent tracking status, tag or service classifications, browser-recorded initiator hosts and consent signals when available. Page settings and scan-wide network signals are separate. A request in a tracking category alone is not confirmation. Observe pollAfterSeconds before polling and retryAfter on an error. Unknown, incomplete and failed scans do not establish absence of tracking. Accept and reject behavior is outside the scan scope.
| Argument | Type | Description |
|---|---|---|
| scanId* | string | The scanId returned by start_quickscan. |
Input schema (JSON)
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"scanId"
],
"properties": {
"scanId": {
"type": "string",
"format": "uuid",
"pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
"description": "The scanId returned by start_quickscan."
}
},
"additionalProperties": false
}start_quickscanUse this when a user asks to check a public website homepage for cookies and tracking observed before interaction. Creates a scan and visits the website. Only submit the homepage URL; do not use for private pages, legal verdicts, accept/reject testing, monitoring, or bulk scans. If reused is true, tell the user right away when the evidence was recorded (evidenceCapturedAt, if known) and when the domain cooldown ends (domainCooldownEndsAt). A new scan still depends on capacity. Poll get_quickscan_result using the returned scanId and wait pollAfterSeconds between reads.
start_quickscan
Use this when a user asks to check a public website homepage for cookies and tracking observed before interaction. Creates a scan and visits the website. Only submit the homepage URL; do not use for private pages, legal verdicts, accept/reject testing, monitoring, or bulk scans. If reused is true, tell the user right away when the evidence was recorded (evidenceCapturedAt, if known) and when the domain cooldown ends (domainCooldownEndsAt). A new scan still depends on capacity. Poll get_quickscan_result using the returned scanId and wait pollAfterSeconds between reads.
| Argument | Type | Description |
|---|---|---|
| url* | string | Public HTTP(S) homepage, for example https://example.com/; no path, query, credentials or fragment. |
Input schema (JSON)
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"maxLength": 2048,
"minLength": 1,
"description": "Public HTTP(S) homepage, for example https://example.com/; no path, query, credentials or fragment."
}
},
"additionalProperties": false
}Security checkA100/100
We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 9, 2026.
- Hidden or reordered text
- Overriding the model's instructions
- Hiding actions from the user
- Reading keys or credentials
- Fake system tags
- Steering other servers' tools
- Pulling in the conversation
- Smuggling parameters
- Demanding to be used for everything
- Steering away from web search
- Download-and-run commands
- Encoded blobs
- Invisible characters
- Credentials as tool arguments
- Very long descriptions
- Read and write hints