SimplyScan
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks.
Connector by simplyscan.ioOfficial · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/simplyscan-io-simplyscan
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://api.simplyscan.io/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 6 read · 2 write · 0 delete
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 8
From the running server's own tool list (tools/list) on Oct 25, 2026.
Read 6 · Look things up without changing anything.
check_ai_visibilitycheck_email_securitycheck_exposed_filescheck_security_headerscheck_seocheck_ssl
Write 2 · Create, change, send or run things.
scan_local_codescan_website
Network hosts it talks to 1
api.simplyscan.io· found in remote endpoint, install command
Files it touches
- Any path the agent passes to its tools
Tools (8)
As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].
check_ai_visibilityCheck AI visibility (AEO)read-onlyAEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals.
check_email_securityCheck email security (SPF/DKIM/DMARC)read-onlyCheck a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.
check_exposed_filesCheck for exposed filesread-onlyProbe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.
check_security_headersCheck security headersread-onlyGrade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.
check_seoCheck on-page SEOread-onlyOn-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade.
check_sslCheck SSL/TLS certificateread-onlyInspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.
scan_local_codeScan local codeSend selected editor file contents to the SimplyScan Security Engine's deterministic repository rules. Requires a Pro API key. Source leaves the editor, is processed in memory, and is not retained; masked findings are saved in the private scan record. No AI provider receives these files. Code rules analyse JavaScript and TypeScript; other files are checked for secrets only. When no file can be analysed, the result has no score.
scan_websiteScan websiteRun a SimplyScan Security Engine security & speed scan (Pro with an entitled API key; otherwise free) of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0, Cursor, Replit, etc.
Signals
- Last release
- Jul 8, 2026 (3 months ago)
Details
- Registry name
io.simplyscan/simplyscan- Version
- 1.0.0
- Auth
- Auth not stated
- License
- License unknown
- Website
- simplyscan.io/mcp
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- Official MCP Registry
Cite this page
SimplyScan MCP server. Agent Mart. https://agentmart.dev/connectors/simplyscan-io-simplyscan (last updated 2026-10-24)