Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
EU cookie-consent audit: trackers before consent, Reject all, Consent Mode v2, TCF; evidence + fixes
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
https://api.bannerproof.app/mcpRun this in your terminal
claude mcp add --transport http bannerproof https://api.bannerproof.app/mcpPaste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"bannerproof": {
"url": "https://api.bannerproof.app/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"bannerproof": {
"type": "http",
"url": "https://api.bannerproof.app/mcp"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
https://api.bannerproof.app/mcpMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
We have not read this server’s tool list yet; we check endpoints in rotation.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026
The registry name was verified against the domain bannerproof.app (the registry checks domain ownership)
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Not checked yet; we check endpoints in rotation
Not checked yet; we check endpoints in rotation
Not checked yet; we read the tool list when we check the endpoint
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
The registry does not list a required key, though some servers ask you to sign in on first use.
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (1.1.1) reached the registry 7 days ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Spec Driven Development, Remote Desktop Commander, HotCodePush
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Manage over-the-air (OTA) updates for React Native, Expo, Capacitor and Cordova apps.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Bannerproof checks a website the way a real first-time visitor from the EU sees it, and reports:
ad_storage, analytics_storage, ad_user_data, ad_personalization);Every finding comes with the exact request as evidence, a concrete fix (13 languages) and the legal reference (ePrivacy Art. 5(3), GDPR, national law). Works with any consent platform — Cookiebot, Usercentrics, OneTrust, Complianz, CookieYes, Borlabs, iubenda or a custom banner.
This repository holds the public pieces: the MCP server listing, connection examples and a GitHub Action. The service itself runs at bannerproof.app.
Remote MCP server, Streamable HTTP, OAuth 2.0:
https://api.bannerproof.app/mcp
A free quick check works without an account (https://api.bannerproof.app/mcp/free). Full findings, monitoring, audits and evidence exports use a Bannerproof account — sign in with OAuth when your client asks, or use an API token from Settings.
| Client | How to connect |
|---|---|
| Claude (claude.ai / Desktop) | Settings → Connectors → find Bannerproof in the directory, or add a custom connector with the URL above |
| Claude Code | claude mcp add --transport http bannerproof https://api.bannerproof.app/mcp |
| Cursor | see examples/cursor-mcp.json |
| Cline | see llms-install.md |
| Other clients | add an MCP server with the URL above (OAuth), or send Authorization: Bearer |
Step-by-step guide: bannerproof.app/help/connect-claude-chatgpt
Tools
| Tool | What it does | Account |
|---|---|---|
quick_check | yes/no + score for any public site | free |
explain_finding | what a finding means, why it matters, how to fix it, legal basis | free |
get_capabilities | what the server checks and what each tool does | free |
get_findings | full findings with evidence, fixes and legal references | yes |
scan_domain | fresh scan of a monitored domain | yes |
compare_scans | what changed since the previous scan | yes |
get_evidence | evidence pack (every request with phase and time, cookies, consent signals) as CSV/JSON | yes |
get_report_link | private report link to send to a client or developer | yes |
audit_domain / audit_domains | audit any site, or up to 10 at once (1 audit credit each; failed scans are refunded) | yes |
get_audits_status | status of several audits at once | yes |
list_domains, add_domain, scan_history, account_info, get_upgrade_link | account helpers | yes |
The server is listed in the official MCP Registry as app.bannerproof/bannerproof (server.json).
Fail a pipeline when a release breaks cookie consent. The domain must be monitored in your Bannerproof account; create an API token in Settings and store it as a secret.
- uses: bannerproof/bannerproof@v1
with: domain: example.com api-token: ${{ secrets.BANNERPROOF_TOKEN }} fail-on: new # "new" = only issues this release added (default), "any" = any issue
Full workflow: examples/github-workflow.yml.
curl -fsS -X POST https://api.bannerproof.app/api/ci/check \
-H "X-Api-Token: $BANNERPROOF_TOKEN" -H "Content-Type: application/json" \ -d '{"domain":"example.com","failOn":"new"}'
| HTTP status | Meaning |
|---|---|
| 200 | pass |
| 422 | fail — the JSON body lists new_issues |
| 202 | still scanning — poll the poll URL from the body |
| 429 | the domain was scanned less than 5 minutes ago (Retry-After header) |
| 502 | the site couldn't be scanned |
In Settings you can also add a webhook: after every scan of a monitored domain Bannerproof POSTs a scan.completed event (score, new and resolved issues) signed with HMAC-SHA256 — X-Bannerproof-Signature: sha256= . ")>.
Bannerproof is an automated technical check of what a site sends at scan time — not legal advice.
Support: support@bannerproof.app