KitScout

Categories › Web & Browser › SEO & site audits

SimplyScan

MCP serverVerified domain · simplyscan.ioRemote● LiveFree to try

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

Install

Remote server: your requests and data go to api.simplyscan.io. Claude Code: claude mcp add --transport http simplyscan https://api.simplyscan.io/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

  • scan_website — Run a SimplyScan Security Engine security & speed scan (Pro with an entitled API key; otherwise free) of a deployed web app URL. Returns a 0
  • scan_local_code — Send selected editor file contents to the SimplyScan Security Engine's deterministic repository rules. Requires a Pro API key. Source leaves
  • check_security_headers — Grade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.
  • check_ai_visibility — AEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt
  • check_seo — On-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap.
  • check_ssl — Inspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.
  • check_email_security — Check a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.
  • check_exposed_files — Probe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools