Categories › Web & Browser › SEO & site audits
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
Remote server: your requests and data go to api.simplyscan.io. Claude Code: claude mcp add --transport http simplyscan https://api.simplyscan.io/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
scan_website — Run a SimplyScan Security Engine security & speed scan (Pro with an entitled API key; otherwise free) of a deployed web app URL. Returns a 0scan_local_code — Send selected editor file contents to the SimplyScan Security Engine's deterministic repository rules. Requires a Pro API key. Source leavescheck_security_headers — Grade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.check_ai_visibility — AEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt check_seo — On-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. check_ssl — Inspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.check_email_security — Check a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.check_exposed_files — Probe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.