Validoria MCP

Permanently delete a journey and all its steps.

Remove a scheduled maintenance window.

Permanently delete a notification rule.

Permanently delete a page fragment.

Permanently delete a scheduled report.

Permanently delete a secret from a target's vault.

Permanently delete a target and all its associated data (runs, findings, incidents, artifacts). This cannot be undone.

Disable all test definitions globally. Optionally filter by category to only disable tests in that category. Requires admin scope.

Enable all test definitions globally. Optionally filter by category to only enable tests in that category. Requires admin scope.

Get full details of a specific automation rule.

Get full details of a specific finding, including evidence, AI analysis, and recommended fix.

Get full details of a specific incident including linked findings, AI analysis, and deployment correlation.

Get full details of a specific journey including all steps.

Get details and results of a load test run.

Get full details of a specific test run including metrics, score, summary, errors, and associated findings.

Get the latest crawl snapshot for a target. Returns page inventory stats, SEO issues, broken pages/assets, response times, and a diff against the previous crawl. Optionally include page-level details.

Get detailed information about a specific target including status, uptime, fingerprint, and composite scores.

Get composite scores (Security, SEO, Performance, Accessibility, AI-search readiness) for a target. Each score is 0-100 with a status rating.

Get the team's configuration including AI enrichment, uptime monitoring, severity escalation, run policies, notification coalescing, SEO, and Kloner Tasks integration settings.

Poll results for a guest_start_scan. Pass the scanId and guestSessionId from the start response. No API key required.

Run a free 6-test HTTP scan against a public URL without an API key. Rate-limited (5/IP/hour, 3/session/day). Returns scanId — poll with guest_get_scan. For continuous monitoring, sign up free and use create_target. See teste-no://docs/quickstart.

Bulk import up to 100 websites for monitoring. Each URL gets a target created with auto-enabled tests, initial scan, and screenshot capture. Partial success — failed URLs are reported individually without blocking others.

List all automation rules for the team. Rules automatically react to events (test failures, incidents, downtime) with configurable actions (escalate severity, suppress, rerun, webhook, notify).

List findings (discovered issues) across your targets. Filter by status, severity, or target. Returns title, severity, status, test name, and AI enrichment if available.

List incidents (grouped operational issues) across your targets. Filter by status. Returns title, severity, status, findings count, and deployment correlation.

List custom browser test flows (journeys) for a target or all team targets. Journeys are multi-step Playwright tests that verify user flows like checkout, login, and search.

List all SEO keywords tracked for a target, including latest Google rank position and the page each is tracked for. Max 50 per target.

List recent load test runs for a target.

List maintenance windows for a target. Shows scheduled and recurring maintenance periods that suppress alerts.

List all notification channels (Email, Slack, Webhook, SMS, Web Push) configured for the team. Sensitive config values are redacted.

List all notification alert rules for the team. Rules map event types + severity levels to notification channels.

List all reusable page fragments for the team. Fragments are shared step sequences (e.g. "Login", "Dismiss Cookies") that can be inserted into multiple Journeys via the use_fragment action.

List recent test runs. Filter by target, status, or test slug. Returns run status, score, summary, duration, and finding count.

List all scheduled reports for the team. Reports are automatically generated and emailed on a daily or weekly basis.

List secrets stored in a target's vault. Values are masked — only key names and labels are shown. Secrets are used by test plugins (e.g. LOGIN_EMAIL, LOGIN_PASSWORD for B2B shops, ga4_service_account for GA4).

List all monitoring targets for your team. Returns name, URL, type, status, and uptime info for each target.

List all available test definitions (plugins). Shows slug, name, category, runner type, weight class, schedule, and enablement status. Useful for knowing which tests can be triggered.

Mute an open finding to suppress it from dashboards and alerts. Status changes from OPEN to MUTED.

Force recompute all composite scores (Security, SEO, Performance, Accessibility) for a target. Useful after manual changes or when scores seem stale.

Record a deployment event for a target. Deployments are auto-correlated with incidents created within 20 minutes. Useful for tracking releases and root-cause analysis.

Remove an SEO keyword from a target.

Resolve an incident to mark it as handled. Changes status to RESOLVED and sets the closed timestamp.

Update the value of an existing secret.

Start a load test against a target. Max 100 concurrent connections, max 5 min duration, 1 test at a time per target, 60s cooldown between tests. Modes: HTTP_FLOOD (autocannon), BROWSER_USERS (Playwright), COMBINED (both). OWNER/ADMIN only.

Store an encrypted secret in a target's vault. Common keys: LOGIN_EMAIL, LOGIN_PASSWORD (B2B shop auth), ga4_service_account (GA4 monitoring). Values are AES-256-GCM encrypted at rest.

Get a comprehensive system health report: BullMQ queue depths, active/stuck runs, user sessions, notification delivery stats, and recent error counts. Requires admin scope.

Get statistics for a specific target: runs, pass rate, findings, duration. Supports lifetime, monthly, or weekly periods.

Get team-wide overview statistics: total runs, pass rate, open findings, open incidents, average duration. Supports lifetime, monthly, or weekly periods.

Run all enabled tests against a target as a scan workflow. All tests in the target's test profile are queued. Returns the workflow ID and list of queued runs.

Execute a journey (custom browser test flow) against its target. The journey runs asynchronously — use get_run to check progress.

Run a specific test against a target. Specify either the test definition ID or slug. The test is queued and executed asynchronously — use get_run to check status.

Update an existing automation rule. Any field not provided will remain unchanged.

Update a journey's name, settings, or steps. When steps are provided, all existing steps are replaced.

Update a notification rule. Only provided fields are changed.

Update a page fragment. When steps are provided, all existing steps are replaced.

Update an existing scheduled report. Any field not provided stays unchanged.

Update a target's properties (name, URL, type, environment, business weight, tags, uptime toggle).

Update team configuration. All fields are optional — only provided fields are changed. Covers: AI enrichment (model, temperature, auto-enrich, spending cap), uptime (timeout, thresholds), severity escalation (recurrence/age triggers), run policies (concurrency, timeouts), SEO (rank tracking, keyword strategy), notification coalescing (digest), and the kill switch (testsPaused).

Enable or disable a test definition globally, or update its schedule/timeout. Requires admin scope.