CertScore.ai

Name: CertScore.ai
Author: ergoveritas1-alt

by ergoveritas1-altversion 0.2.32i★ 0iComputer or cloud

Registry nameai.certscore/mcp

How to install

What it does

MCP server for CertScore.ai public website risk-signal workflows.

Connects Computer or cloud
Account or key Cloud: Sign in to the service when you connect (OAuth) · Local: No key needed
Category Web & browsers

Install

Pick the AI app you use, then copy the settings.

Passed 4/5 checks · What you ask goes through the maker’s server (mcp.certscore.ai)

First: which AI do you use?

ClaudeWeb · app · phoneChatGPTWebClaude CodeTerminalCursorCode editorVS CodeCode editorOtherOther apps

Pick your app and the steps appear below.

Works with Claude · about 2 min

No key, nothing to install · Set it up once on claude.ai or the desktop app, then use it in chat · free accounts can add 1 · on Team/Enterprise an Owner adds it

Open Claude’s Connectors page
CustomizeConnectors
Done
Click “+ Add” → “Add custom connector” and fill in these 2 fields
Copy each value into the field with the same name in Claude, then click Continue
Name · NameCertScore.ai
Remote MCP server URL · Addresshttps://mcp.certscore.ai/mcp
Leave Authentication as Claude detected it, then click Add
Done
Turn it on in a chat
+ConnectorsCertScore.ai
Done
Try it
Use CertScore.ai and tell me what you can do for me, then show me one thing
✓ If Claude says it is using CertScore.ai or shows a CertScore.ai tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with ChatGPT on business plans only

ChatGPT Business, Enterprise or Edu on the web, added by a workspace admin or owner · On Free, Plus or Pro: your ChatGPT plan cannot connect MCP yet

Open ChatGPT’s add-MCP page on the web
Plugins+Add custom MCP server
Done
Fill in the name and address
Enter a name, paste the address under Connection, tick the risk warning and click Create as a plugin
Name · NameCertScore.ai
Connection · Addresshttps://mcp.certscore.ai/mcp
Done
Pick CertScore.ai in a chat
Start a new chat and pick CertScore.ai from your plugins before typing
Done
Try it
Use CertScore.ai and tell me what you can do for me, then show me one thing
✓ If ChatGPT says it is using CertScore.ai or shows a CertScore.ai tool in the answer, you are connected

Menu names checked against OpenAI’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Claude Code · about 2 min

No key, nothing to install

Open Terminal
Mac: press Command+Space and type Terminal · Windows: open PowerShell
Done

Paste this command and press Enter

claude mcp add --transport http --scope user certscore https://mcp.certscore.ai/mcp

Done

Type /mcp in Claude Code
You should see CertScore.ai listed as connected
Done
Try it
Use CertScore.ai and tell me what you can do for me, then show me one thing
✓ If Claude Code says it is using CertScore.ai or shows a CertScore.ai tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Cursor · about 2 min

No key, nothing to install

Click this button to open Cursor
Open in Cursor
Cursor asks you to confirm; click Install
Done
Open the AI chat in Cursor in Agent mode
Done
Try it
Use CertScore.ai and tell me what you can do for me, then show me one thing
✓ If Cursor says it is using CertScore.ai or shows a CertScore.ai tool in the answer, you are connected

Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with VS Code · about 2 min

No key, nothing to install

Click this button to open VS Code
Open in VS Code
VS Code asks you to confirm; click Install
Done
Open the AI chat in VS Code in Agent mode
Done
Try it
Use CertScore.ai and tell me what you can do for me, then show me one thing
✓ If VS Code says it is using CertScore.ai or shows a CertScore.ai tool in the answer, you are connected

Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Other apps that use MCP, such as Windsurf, Zed or Gemini CLI, each add servers differently. See how in the app list.

See every app that uses MCP →

Address for apps that connect over the web

Addresshttps://mcp.certscore.ai/mcp

JSON settings are under “For developers” below

Stuck? Ask people who use CertScore.ai💬 Discussion →

For developers: Terminal commands and JSON settings

Over the web

Claude Code

claude mcp add --transport http --scope user certscore https://mcp.certscore.ai/mcp

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "certscore": {
      "url": "https://mcp.certscore.ai/mcp"
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "certscore": {
      "type": "http",
      "url": "https://mcp.certscore.ai/mcp"
    }
  }
}

Installed on your computer

Claude Code

claude mcp add --scope user certscore -- npx -y @certscore/mcp

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "certscore": {
      "command": "npx",
      "args": [
        "-y",
        "@certscore/mcp"
      ]
    }
  }
}

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "certscore": {
      "command": "npx",
      "args": [
        "-y",
        "@certscore/mcp"
      ]
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "certscore": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@certscore/mcp"
      ]
    }
  }
}

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

At a glance

GitHub stars i: 0
Downloads per weeki: 815/wk
Verified domain: ✓ certscore.ai
Licence i: No licence stated
Connection: Computer or cloud
Transport: stdio, streamable-http
Latest versioni: 0.2.32
Categoryi: Web & browsers
Published to registryi: Nov 3, 2026
Code last changedi: Nov 12, 2026
Maker: ergoveritas1-alt
Packages: npm: @certscore/mcp
Repo: ergoveritas1-alt/certscore.ai
Registry status: Active

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Connect over the internet in

Claude ChatGPT Goose LM Studio Msty Studio Cherry Studio Cursor VS Code + GitHub Copilot Visual Studio Windsurf (Devin Desktop)Zed Kiro Cline Continue JetBrains AI Assistant Claude Code Codex CLI Gemini CLI OpenCode nodecode Warp LibreChat Open WebUI Raycast

Run on your computer in

Claude Goose LM Studio Msty Studio Cherry Studio Cursor VS Code + GitHub Copilot Visual Studio Windsurf (Devin Desktop)Zed Kiro Cline Continue JetBrains AI Assistant Claude Code Codex CLI Gemini CLI OpenCode nodecode Warp LibreChat Raycast

All apps, with pros and cons →

What it can do

The server asks you to sign in before it lists its tools.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 12, 2026

✓ Pass
Maker matches the repo
The registry name was verified against the domain certscore.ai (the registry checks domain ownership)
✓ Pass
Still maintained
Code last changed today
✕ Fail
Has a licence
No licence file found in the repo
✓ Pass
Endpoint responds
Responded in 517 ms (HTTP 401)
✓ Pass
Sign-in with OAuth
Declares OAuth sign-in, so your AI app can take you to log in
… Not checked yet
No hidden instructions in tool descriptions
Not checked yet; we read the tool list when we check the endpoint

Discussion

Ask, share a tip or report that it does not work. Sorted by what people marked helpful.

No posts yet. Be the first to ask or share.

Posts here are written by users, not the PopNx team.

User reviews

No reviews yet

Compared with others in Web & browsersi

More stars than 0% of the other 1472 servers in this category
Published to the registry more recently than 78% of the other 1472 servers in this category
Basic checks equal to or better than 57% of the other 1472 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is CertScore.ai safe?

It passed 4 of 5 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

Either way works: install it on your computer or connect to the cloud version.

Is it still maintained?

The GitHub repo last changed today, and the latest version (0.2.32) reached the registry 9 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT Business and above.

What can I use instead?

In the same category: Browser Use, Scrapling MCP Server, Chrome DevTools MCP

Others in the same category

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Browser Use

Lets AI do web tasks for you, such as filling forms, searching and extracting data, in the maker’s cloud browsers or on your computer.

by browser-useWidely used↓ 1.7M/wk★ 120.7KUpdated 22 days ago

Computer or cloud✓ service owner · browser-use.com

Install

Scrapling MCP Server

Web scraping with stealth HTTP, real browsers, and Cloudflare bypass. CSS selectors supported.

by D4VinciWidely used↓ 396.9K/wk★ 101.6KUpdated 7 days ago

Runs on your computer

Install

Chrome DevTools MCP

Lets AI use Chrome’s developer tools to inspect pages, find what makes them slow and spot errors. Made by the Chrome DevTools team.

by ChromeDevToolsWidely used↓ 1.9M/wk★ 55.1KUpdated yesterday

Runs on your computer

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

CertScore

CertScore (certscore.ai) is a production-minded MVP for scanning public websites for potential accessibility, privacy, cookie, policy, and disclosure risk signals. It is a risk signal and monitoring product, not a legal certification platform.

Monorepo structure

website-signal-risk-scanner/

├─ apps/ │ ├─ web/ │ └─ validation-worker/ ├─ packages/ │ ├─ shared/ │ ├─ web-bot-auth/ │ ├─ db/ │ └─ ui/ ├─ docs/ ├─ .env.example ├─ turbo.json ├─ package.json └─ pnpm-workspace.yaml

Workspace packages

apps/web: product-facing web app and control-plane workflows
apps/validation-worker: active validation runtime owned by WC01
packages/shared: shared constants, types, validators, scoring config, and scheduling helpers
packages/web-bot-auth: server-only Web Bot Auth signing and key-directory helpers
packages/db: PostgreSQL query helpers, migrations, seed SQL, and env helpers
packages/ui: reusable UI primitives

Repo boundary

WC01 is now the product/control-plane repo.

product web flows, scan creation, reporting, and validation stay here
the standalone scanner runtime now lives in WS01
scanner operational changes, crawler identity work, and scanner deploy flow should originate in WS01

What the MVP includes

public homepage with preview scan funnel
Better Auth with Google OAuth and email/password login flows
organization bootstrap and protected workspace routes
domain management, plan limits, and client grouping
DB-backed scan creation with scanner-service claiming
crawl/discovery, accessibility, privacy, and legal heuristics
deterministic scoring, canonical report payloads, and authenticated report UI
scanner-generated PDF generation and upload
regression summaries and scheduled rescans
lightweight branding for reports and PDFs

MCP Light

CertScore.ai MCP Light is the free, no-auth, hosted three-tool integration for public website privacy scans. It detects evidence-backed privacy, cookie, tracker, consent, policy, regulatory-review, HTTPS/TLS, and eligible Reject Path post-refusal signals. Results include a CertScore score and supporting evidence for human and agentic review; they are not legal advice, certification, or a compliance determination.

Add CertScore to Cursor · MCP Light landing page · Cursor Directory listing · Agent installation guide · Full installation reference · MCP package guide

Try it with: Use CertScore.ai to review [PUBLIC URL] before launch. Report the CertScore score, evidence-backed findings, Reject Path observations when available, coverage limitations, and the report URL.

Environment variables

This monorepo should use apps/web/.env.local as the single local development runtime env:

copy apps/web/.env.example to apps/web/.env.local

Use .env.example only as a reference template for shared keys. Do not rely on a root .env.local for app runtime configuration.

Recommended environment split inside WC01:

local web + local validation runtime: dedicated dev PostgreSQL database plus S3-compatible storage
production web + production validation runtime: dedicated production PostgreSQL database plus S3-compatible storage

Do not point localhost at the production database or production auth credentials unless you are intentionally testing production behavior.

Required for the web app:

NEXT_PUBLIC_APP_URL
DATABASE_URL
BETTER_AUTH_SECRET
GOOGLE_CLIENT_ID
GOOGLE_CLIENT_SECRET
S3_BUCKET
S3_REGION
S3_ACCESS_KEY_ID
S3_SECRET_ACCESS_KEY

Required for the validation runtime in WC01:

DATABASE_URL
OPENAI_API_KEY

Optional but recommended:

WORKER_CONCURRENCY
PLAYWRIGHT_BROWSERS_PATH
VALIDATION_OPENAI_MODEL
VALIDATION_NANO_MODEL
WEB_BOT_AUTH_ENABLED
WEB_BOT_AUTH_PRIVATE_KEY_PEM
WEB_BOT_AUTH_SIGNATURE_AGENT_URL

Local development setup

Use Node 22, 23, or 24 for local development. Node 20 is below the workspace engine floor, and Node 25 is not supported because it can fail DNS resolution for app routes and external service calls on localhost.

Install dependencies:

pnpm install

Copy the environment template:

cp apps/web/.env.example apps/web/.env.local

Start a dedicated PostgreSQL instance for local development.
Apply the SQL migrations from packages/db/migrations.
Seed local development data when needed with packages/db/seed/0001_dev_seed.sql.
Configure Better Auth provider settings:

Google OAuth if enabled
email/password and verification settings as needed

Configure auth redirect URLs:

Google OAuth must allow Better Auth's provider callback route:
http://localhost:3000/api/auth/callback/google
http://127.0.0.1:3000/api/auth/callback/google
https://certscore.ai/api/auth/callback/google
/auth/callback is only an app alias route; it is not the redirect URI Better Auth initiates with Google

Keep local and production auth isolated:

local NEXT_PUBLIC_APP_URL should be http://localhost:3000
local database and auth secrets should come from the dev environment
production secrets should exist only in the active AWS/web or worker deployment settings

Create the S3-compatible bucket referenced by S3_BUCKET.
Install Playwright Chromium for the validation runtime:

pnpm --filter @website-signal-risk-scanner/validation-worker exec playwright install chromium

Start validation local development with a watched validation worker:

pnpm dev:validation

Start the main local app by itself when needed:

pnpm --filter @website-signal-risk-scanner/web dev

Use WS01 when you need the standalone scanner locally.
Start the standalone scanner locally against the same dev database and storage env as localhost:3000:

pnpm dev:scanner:local

Use the combined local runner only when you want web + validation together in WC01:

pnpm dev:all

Run a validation scheduler sweep manually when needed:

pnpm dev:validation:scheduler

Development verification

Use these commands before shipping changes:

pnpm turbo run typecheck
pnpm turbo run build

Validation-specific checks:

pnpm --filter @website-signal-risk-scanner/validation-worker typecheck
pnpm test:scan-pipeline

The scan pipeline test is deterministic and runs locally from apps/validation-worker/src/validation/pipeline.test.ts.

The normalized concern lifecycle in WC01 is documented in docs/normalized-concern-pipeline.md.

CI validation

GitHub Actions workflow: .github/workflows/accessibility-validation.yml

worker-scan-pipeline-tests runs on pushes to main, pull requests, and manual dispatch. It installs Chromium, typechecks validation-worker, and runs pnpm test:scan-pipeline.
live-validation-smoke runs after the deterministic job and executes pnpm --filter @website-signal-risk-scanner/validation-worker smoke:validation only when the runtime secrets are configured.
If those secrets are missing, the live smoke job is skipped and only the deterministic scan pipeline job runs.

Runtime validation tooling

Use these lightweight checks before first deployment validation:

pnpm dev:storage:local
pnpm --filter @website-signal-risk-scanner/web check-env
pnpm check-env:validation
pnpm --filter @website-signal-risk-scanner/validation-worker check-env
pnpm --filter @website-signal-risk-scanner/validation-worker check-runtime

For local validation runs, pnpm dev:storage:local starts MinIO against the apps/web/.env.local S3 settings and creates the configured bucket when needed. Run it alongside pnpm dev:scanner:local and pnpm dev:validation:worker.

Use this runtime smoke helper:

pnpm --filter @website-signal-risk-scanner/validation-worker scheduler

The full runtime QA sequence is documented in docs/runtime-validation.md. The validation pipeline design and deployment shape are documented in docs/validation-pipeline-plan.md. The validation crawler deployment and VM runbook is documented in docs/validation-ops-runbook.md. Cloudflare Verified Bot setup is documented in docs/cloudflare-web-bot-auth.md.

Web Bot Auth

ConsentCheck can expose a signed HTTP Message Signatures key directory and sign outbound HTTP crawler requests for Cloudflare Verified Bot workflows.

Required configuration:

WEB_BOT_AUTH_ENABLED
WEB_BOT_AUTH_PRIVATE_KEY_PEM
WEB_BOT_AUTH_SIGNATURE_AGENT_URL
WEB_BOT_AUTH_EXPIRES_SECONDS
WEB_BOT_AUTH_INCLUDE_NONCE

Common commands:

pnpm web-bot-auth:generate
pnpm web-bot-auth:print
pnpm web-bot-auth:test-request
pnpm test:web-bot-auth

Production deployment

Web runtime

the live public web deployment target is the AWS ECS/Fargate path for certscore.ai
consentcheck.site is owned outside WC01 and must not be deployed by this repo
main deploys through .github/workflows/web-aws-ecs-deploy.yml
run pnpm ops:check:deploy before or after topology changes to catch stale local assumptions
run pnpm ops:check:live against the public hosts to verify runtime target and revision alignment after deploy
treat docs/aws-web-ecs-cutover-plan.md as the active web deployment runbook
treat docs/deploy-amplify.md as future-state reference material only

Validation And Scanner Runtime

do not use WC01 for the primary scanner deploy path
use WS01 for scanner runtime deployment
keep WC01 deployment guidance scoped to web and validation only
keep web production, validation worker, and scanner runtime as three distinct deployment paths
use the AWS validation deployment lane for WC01 validation runtime changes

Database, Auth, and Storage

create production PostgreSQL, Better Auth, and S3-compatible storage resources separate from local development
apply all migrations in order
configure the production site URL and production redirect URLs only
create the report storage bucket referenced by S3_BUCKET

Scheduler

Recommended production trigger:

run the validation scheduler sweep every hour if the validation runtime is enabled

Command:

pnpm dev:validation:scheduler

The primary scanner scheduler now lives in WS01.

Deployment readiness checklist

Environment variables configured
PostgreSQL database created
database migrations applied
Better Auth providers configured
S3-compatible storage bucket created
Playwright browsers installed
Worker process running
Scheduler cron configured
First domain scanned successfully
Report generated successfully
PDF export generated successfully

First production validation

After deployment, validate in this order:

run the env and runtime checks above
verify login and organization bootstrap
verify preview scan flow
verify full scan completion
verify findings, scores, and report persistence
verify PDF export
verify regression on a second scan
verify the hourly scheduler sweep path

Operational notes

The standalone scanner in WS01 owns crawl, auditing, scoring, reporting, PDF generation, and schedu

Only the beginning is shown; read the rest in the repo

CertScore.ai

What it does

Install

Open Claude’s Connectors page

Click “+ Add” → “Add custom connector” and fill in these 2 fields

Turn it on in a chat

Try it

Open ChatGPT’s add-MCP page on the web

Fill in the name and address

Pick CertScore.ai in a chat

Try it

Open Terminal

Paste this command and press Enter

Type /mcp in Claude Code

Try it

Click this button to open Cursor

Open the AI chat in Cursor in Agent mode

Try it

Click this button to open VS Code

Open the AI chat in VS Code in Agent mode

Try it

Over the web

Installed on your computer

At a glance

Which apps can use it

Related guides

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Discussion

User reviews

Compared with others in Web & browsersi

Common questions

Others in the same category

Browser Use

Scrapling MCP Server

Chrome DevTools MCP

README from the maker

CertScore

Monorepo structure

Workspace packages

Repo boundary

What the MVP includes

MCP Light

Environment variables

Local development setup

Development verification

CI validation

Runtime validation tooling

Web Bot Auth

Production deployment

Web runtime

Validation And Scanner Runtime

Database, Auth, and Storage

Scheduler

Deployment readiness checklist

First production validation

Operational notes