Prototype · Preview: every server in the official registry, synced every 30 minutes. Reviews and accounts come in a later step.
PopNx MCPMCP servers for people who use AI · explained in plain words

Webskan

by kamilobstawskiagent-uxversion 0.1.0i★ 0iRuns in the cloud
Registry nameio.github.kamilobstawskiagent-ux/webskan

Install

Overview

Description from the maker (original English)

Audit and re-check a live website: Lighthouse, SEO, accessibility, security, links, journeys.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

  • Connection: Runs in the cloud
  • Transport: Streamable HTTP
  • Category: Cybersecurity
  • You need to fill in: Authorization

Install

Pick the AI app you use, then copy the settings.

Before you install

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

Which app do you use?

Pick your app above. We remember it, so next time the button says “Install in …”.

This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.

Run this in your terminal

claude mcp add --transport http webskan https://webskan.com/mcp --header 'Authorization: your-value'

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "webskan": {
      "url": "https://webskan.com/mcp",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "webskan": {
      "type": "http",
      "url": "https://webskan.com/mcp",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

  • Authorization secret HTTP header
    Optional. 'Bearer ' for the paid plan (coming soon); omit for the free plan.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Connect over the internet in

ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

All apps, with pros and cons →

Related guides

What it can do

Tool names and descriptions exactly as the server reported them on Nov 8, 2026. The maker wrote them, not us; we show them as plain text.

  • scan_website

    Quick scan of one page (the URL you pass, usually the home page): Lighthouse mobile scores (performance, accessibility, best practices, SEO) with LCP/CLS/TBT/page weight/requests, plus HTTPS redirect, TLS, HSTS and security headers, title, meta description, H1, image alt texts, v

  • audit_website

    Starts a full technical audit of a whole website and returns immediately with an auditId (poll get_audit every 20-30 s; typically done in 1-5 min). The audit crawls up to `pages` pages (1-30, default 15) following internal links and the sitemap, and checks: broken internal/extern

  • get_audit

    Returns the status (queued / running with ETA) or the finished result of an audit started with audit_website or recheck_website: summary counts by severity, Lighthouse mobile+desktop scores, findings sorted high → medium → low → info (each with id, area, severity, title, detail a

  • recheck_website

    Runs the same audit again (same URL, same number of pages) linked to the original auditId, so get_audit returns a diff: fixed / still open / new / unverified findings and Lighthouse before → after. Call it after you have deployed fixes. Asynchronous like audit_website (returns a

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 11, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified with the GitHub account kamilobstawskiagent-ux, which owns the repo

  • ✓ Pass

    Still maintained

    Code last changed 3 days ago

  • … Not checked yet

    Has a licence

    We have not read this repo from GitHub yet

  • ✓ Pass

    Endpoint responds

    Responded in 330 ms (HTTP 200)

  • – Not applicable

    Sign-in with OAuth

    No sign-in needed

  • ✓ Pass

    No hidden instructions in tool descriptions

    Read 4 tool descriptions and found no hidden instructions to the AI

Compared with others in Cybersecurityi

  • More stars than 0% of the other 1024 servers in this category
  • Published to the registry more recently than 89% of the other 1024 servers in this category
  • Basic checks equal to or better than 100% of the other 1024 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Webskan safe?

It passed 4 of 4 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: Authorization

Does it run on my computer or in the cloud?

It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.

Is it still maintained?

The GitHub repo last changed 3 days ago, and the latest version (0.1.0) reached the registry 4 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.

What can I use instead?

In the same category: Robin: AI-Powered Dark Web OSINT, HOL Guard, UniFi Network MCP

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Robin: AI-Powered Dark Web OSINT

Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.

by apurvsinghgautamGrowing★ 7.9KUpdated 39 days ago

Runs on your computer

HOL Guard

Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

by hashgraph-onlineWidely used↓ 7.1K/wk★ 1.1KUpdated 6 days ago

Runs on your computer

UniFi Network MCP

Manage UniFi Network devices, clients, firewall, VLANs, VPNs, and more via MCP.

by sirkirbyWidely used↓ 11.3K/wk★ 1KUpdated 8 months ago

Runs on your computer

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Webskan plugin for Claude Code

Audit and re-check the website your agent just shipped. The plugin adds the Webskan remote MCP server (https://webskan.com/mcp) and a /webskan:site-check skill that teaches Claude Code the loop: audit, fix the high and medium findings by id, deploy, re-check, report fixed / still open / new.

What Webskan checks, from the outside, in a real mobile browser: Lighthouse (mobile and desktop), a crawl of up to 30 pages with SEO checks on each, axe-core accessibility (WCAG 2.1 AA), security headers and TLS, broken links, forms, the cookie banner, and customer journeys (404 page, menu, search, cart to checkout). Every finding has a stable id, so the re-check is an exact diff.

Install

In Claude Code:

/plugin marketplace add kamilobstawskiagent-ux/webskan-claude-plugin

/plugin install webskan@webskan

Or from the shell:

claude plugin marketplace add kamilobstawskiagent-ux/webskan-claude-plugin

claude plugin install webskan@webskan

No account and no key are needed for the free plan. If you only want the MCP server without the skill:

claude mcp add --transport http webskan https://webskan.com/mcp

Use

/webskan:site-check https://mysite.com

or just ask: "audit https://mysite.com and fix the high-severity findings, then recheck".

Tools provided by the server: scan_website, audit_website, get_audit, recheck_website. Details, limits of the free plan and configuration for Cursor, VS Code, Codex CLI and other clients: https://webskan.com/developers/

Free plan limits

  • scan_website: 10 per hour per IP (120 per hour overall); results cached 24 h per host, kept 7 days.
  • audit_website / recheck_website: 2 per IP per 24 h and 1 per host per 24 h; 1-30 pages; results kept 30 days.
  • Public websites only - no localhost, private networks or sites behind a login.

Developer plan ($29/month): 30 whole-site audits per 24 h per key and no one-audit-per-host-per-day window. Pass the key as Authorization: Bearer (an http server with headers in your MCP config). Details: https://webskan.com/developers/#teams

Layout

.claude-plugin/marketplace.json      marketplace "webskan"

plugins/webskan/ .claude-plugin/plugin.json plugin manifest .mcp.json remote MCP server skills/site-check/SKILL.md the audit -> fix -> recheck loop

License

MIT. Contact: kontakt@webskan.com