Prototype · Preview: every server in the official registry, synced every 30 minutes. Reviews and accounts come in a later step.
PopNx MCPMCP servers for people who use AI · explained in plain words

Pageaudit

by wrpbrversion 1.0.1i★ –iRuns in the cloud
Registry nameonline.pageaudit/pageaudit

Install

Overview

Description from the maker (original English)

Technical SEO, passive security and page-delivery audits with evidence and suggested fixes.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

  • Connection: Runs in the cloud
  • Transport: Streamable HTTP
  • Category: Cybersecurity

Install

Pick the AI app you use, then copy the settings.

Before you install

You need

Which app do you use?

Pick your app above. We remember it, so next time the button says “Install in …”.

Works in Claude on the web, desktop and mobile:

  1. Open Settings → Connectors
  2. Press Add custom connector
  3. Paste the address below and press Add
  4. If it asks you to sign in, sign in with the maker
SettingsConnectors1+ Add2https://…3
https://pageaudit.online/mcp

Run this in your terminal

claude mcp add --transport http pageaudit https://pageaudit.online/mcp

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "pageaudit": {
      "url": "https://pageaudit.online/mcp"
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "pageaudit": {
      "type": "http",
      "url": "https://pageaudit.online/mcp"
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

ChatGPT connects only to servers on the internet:

  1. Open ChatGPT on the web → Settings → Connectors (Apps)
  2. Press Create or Add (some plans need Developer mode under Advanced first)
  3. Paste the address below, give it a name and save
  4. If it asks you to sign in, sign in with the maker
SettingsConnectors1+ Create2https://…3
https://pageaudit.online/mcp

Menu names can differ slightly by plan and over time.

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 8, 2026. The maker wrote them, not us; we show them as plain text.

  • list_sites

    Read up to 50 sites owned by the signed-in account. Follow next_cursor.

  • add_site

    Add a site to the account or reuse the existing domain. Up to 1,000 sites per account. This creates no subscription or payment. An account holds up to 1,000 sites (409 site_limit). Adding a site creates no subscription or payment. The existing guest audit workspace stays separate

  • get_site

    Read one site owned by the signed-in account.

  • search_console

    Read own-site keywords, opportunities at average positions 4–20, up to 20 tracked queries and daily history. Check dates, partial coverage and collection failure before proposing edits. These are not market search volumes. The sample covers 28 days, at most 50 queries and 50 page

  • track_search_queries

    Replace the site's tracked query selection (up to 20). Read search_console first to preserve existing selections. Removed queries keep their stored history. E-mail alerts require an active site package. Accepts up to 20 exact queries. Removed queries become inactive; their stored

  • connect_search_console

    Start read-only Google consent. The account owner must follow redirect in their browser. Follow redirect in the account's browser. Consent expires after five minutes. The callback is single-use and bound to the account and site. The property must match the site and Google must au

  • sync_search_console

    Collect a due sample. Repeated calls cannot bypass the daily reservation. The hourly schedule uses the same durable reservation. A failure preserves the last good sample and schedules the next attempt 24 hours later. This route cannot force an extra collection.

  • disconnect_search_console

    Remove the local Google credential and stop collection. Keep the last good sample. The last good sample stays available. An in-flight callback or collection cannot reconnect the site. Returns: { available, connected, property, last_attempt_at, last_success_at, next_run_at, error,

  • prompt_allowance

    Read remaining prompt units before generating. This does not use credit.

  • generate_fix_prompt

    Prepare a coding-agent prompt from an owned report. One check uses one unit; full uses three. Three units are free once. Then US$0.10 per unit, or included in an active PageAudit plan. Read prompt_allowance first. Only send credit_token after explicit spending authorization; pres

  • generate_domain_fix_prompt

    Generate a fix prompt from saved domain observations. Prepare a coding-agent prompt from an owned report. One check uses one unit; full uses three. Three units are free once. Then US$0.10 per unit, or included in an active PageAudit plan. Read prompt_allowance first. Only send cr

  • generate_site_fix_prompt

    Generate a fix prompt for a weekly finding or a Search Console opportunity. Prepare a coding-agent prompt from an owned report. One check uses one unit; full uses three. Three units are free once. Then US$0.10 per unit, or included in an active PageAudit plan. Read prompt_allowan

  • get_fix_prompt

    Read a saved prompt. It costs nothing, even after plan expiry. Preserve the complete prompt and license. Use it only for license.domain. This does not authorize deployments or infrastructure changes. Uses the authenticated owner and active organization. Returns the immutable text

  • list_audit_fix_prompts

    Find saved audits prompts before generation. Listing is free. Keep language and source filters when following the cursor. At most 100 saved rows per page, plus up to three earlier free audit receipts. Follow _links.next. A legacy receipt has id=null and legacy=true; the matching

  • list_domain_fix_prompts

    Find saved tabs prompts before generation. Listing is free. Keep language and source filters when following the cursor. At most 100 saved rows per page, plus up to three earlier free audit receipts. Follow _links.next. A legacy receipt has id=null and legacy=true; the matching ge

  • list_site_fix_prompts

    Find saved sites prompts before generation. Listing is free. Keep language and source filters when following the cursor. At most 100 saved rows per page, plus up to three earlier free audit receipts. Follow _links.next. A legacy receipt has id=null and legacy=true; the matching g

  • weekly_site_report

    Read the weekly report of a site: what changed since last week, the new pages of up to 3 competitors and every finding. Reading never runs the report. Once a week the report checks the first 500 URLs of the site's sitemap, says what changed since the week before (new and fixed pr

  • save_weekly_site_report

    Turn the weekly report of a site on or off and set up to 3 competitors. Turning on needs a watch package in force. Turning on needs a watch package in force and a free site in it (409 with `limit` and `plans` otherwise). The first report runs right away; later ones run a week aft

  • weekly_site_report_history

    Read one weekly report of a site's history by its id.

  • ai_search_visibility

    Check whether the site's page appears in AI search for each target search, at which position, and which sites appear in its place, with plain recommendations. Uses the saved searches or the ones the page suggests when queries is omitted. Send {} to use the saved searches, or the

  • ai_search_history

    Read the plan, the saved searches, the last runs and the position trend of each search. Reads never call the search engine. The trend compares each search of the newest run with the previous run that had it: up, down, same, new or lost.

  • save_ai_search_queries

    Save up to ten searches for the weekly report to track (three without a watch package). Saves use the expected version. Without a current watch package, an account tracks up to three searches. Uses the shared 240 writes per site and UTC day.

  • journeys

    Read the owned site's installation, actions, paths and ordered conversion funnel for the last seven days. Requires the account's browser session. Only this site's owner can read it. Data updates through the shared realtime transport. No user identity, typed text or screen recordi

  • configure_journeys

    Enable or pause an owned site's collection, or set up to eight ordered project_action steps. Activation requires an existing paid site package; this call never buys one. Configure optional Google credentials in the UI. Activation requires the existing site package or an operator-

  • connection_review

    Requires the account session, current X-Organization-Id and CSRF for writes. Read today's private TLS review without starting a scan. One review per account, organization, origin and UTC day. Starting requires current domain monitoring rights. The account has three starts per UTC

  • review_connection

    Requires the account session, current X-Organization-Id and CSRF for writes. Start a TLS review of the saved HTTPS origin using current domain monitoring rights. At most three starts per account and UTC day, one per site. A repeated request reuses today's review. Do not claim com

  • cancel_connection_review

    Requires the account session, current X-Organization-Id and CSRF for writes. Cancel the current TLS review and preserve completed evidence. One review per account, organization, origin and UTC day. Starting requires current domain monitoring rights. The account has three starts p

  • domain_portfolio

    Requires the account session, current X-Organization-Id and CSRF for writes. Read cached domain monitoring and deadlines for selected saved pages. Does not start external collection or activate monitoring. Every tab must belong to the current account and organization. Reads by pr

  • preview_domain_alerts

    Requires the account session, current X-Organization-Id and CSRF for writes. Review the exact selected domains before changing renewal notices. Does not activate monitors, purchase access or change certificate notice timing. Select up to 25 saved pages. Repeated registrable domai

  • apply_domain_alerts

    Requires the account session, current X-Organization-Id and CSRF for writes. Apply the reviewed selection. Requires the preview from preview_domain_alerts. A stale preview changes nothing. Does not activate monitors, purchase access or change certificate notice timing. Select up

  • domain_status

    Read registration, contact visibility, TLS, DNS, CAA, mail policies, certificate issuance and a limited server comparison. Read source dates and collection gaps. Private options require the account session. A discovered name never starts monitoring automatically. Pages share publ

  • check_domain

    Refresh due registration, contacts, TLS, DNS, mail policies, certificate issuance and a limited DNS/TLS sample. Reuses fresh public data. Does not enable monitoring or make a purchase. Reuse fresh observations. A failed or partial query preserves the last complete observation and

  • set_domain_expiry

    Requires the account session, current X-Organization-Id and CSRF for writes. Set or remove the private manual expiry. It does not change the registry data or confirm renewal payment. Send manual_expires_on, dns, or both. Omitted settings are preserved. DNS requires both selectors

  • configure_domain_dns

    Requires the account session, current X-Organization-Id and CSRF for writes. Set up to three known DKIM selectors and choose whether IP rotation is expected. Expected rotation keeps history without notices; alias changes still notify. Does not discover selectors, enable monitorin

  • configure_domain_monitor

    Requires the account session, current X-Organization-Id and CSRF for writes. Enable or stop domain monitoring, or pause notices for maintenance. Uses existing rights; 402 supplies checkout instructions and never buys automatically. Stopping a monitor does not cancel a subscriptio

  • domain_history

    Requires the account session, current X-Organization-Id and CSRF for writes. Read up to 50 private incidents with notice delivery. Send the last event number as before for the next page. A first observed risk is an initial incident, not evidence of an external change. The first D

  • acknowledge_domain_event

    Requires the account session, current X-Organization-Id and CSRF for writes. Acknowledge an expected event. Suppress its notice only if sending has not started. Preserve the event and its evidence. Preserve the event and observation. Acknowledgement does not erase a confirmed ris

  • audit_site

    Check the first 20 URLs of a site's sitemap: status, redirects, robots.txt, noindex, canonical, titles and descriptions. It also flags a plan with different prices on different pages. Free, without an account. The same site within one hour returns the stored sample. URLs of anoth

  • check_ai_access

    Request a page as Googlebot, Bingbot and the AI crawlers (OAI-SearchBot, Claude-SearchBot, PerplexityBot, ChatGPT-User, GPTBot, ClaudeBot) and see who gets a 403, a 429 or a firewall challenge that robots.txt does not show. Also returns the date of the newest sitemap lastmod and

  • api_index

    Discovers the whole PageAudit API (self-describing index).

  • health

    Liveness and the commit deployed right now — it is how the smoke waits for its own deploy.

  • list_tools

    Lists the micro-tools (title, meta, canonical, OG, JSON-LD…).

  • get_tool

    Copy and checks of one micro-tool by slug (e.g. title-tag-checker).

  • audit_url

    Check a web page's search metadata, crawl access, structured data and selected discovery files. Return evidence, limits and suggested changes without creating a saved tab. A blocked target returns HTTP 502 with target_blocked. The report does not certify security or accessibility

  • create_guest

    Creates a guest token pa_… for the tab workspace. Keep the token: it is the identity of the tabs and of the audits tied to them.

  • list_tabs

    Lists the owner's saved pages (guest or session), with the active page's last report. Group pages by site to match the Projects table. One call loads the saved pages and the active page's last report. The UI groups pages by site in Projects and opens each site in a work tab. The

  • create_tab

    Opens a saved URL. Set queue_audit=false to monitor a discovered origin without a page audit. Past the free tab allowance it answers 402 with `accepts[]`: pay and repeat.

  • run_tab

    Re-audits the tab's URL. Consumes the same daily allowance as `POST /api/audit` — past it, 402 with `accepts[]`.

  • tab_history

    The tab's previous runs and what changed between each one and the one before it (score delta, findings that appeared and that disappeared). Every run has always been kept; this is where you read the series. Each entry carries the score, the counts and a `change` with the point de

  • watch_tab

    Turns the daily watch on or off for a tab: it re-audits the page once a day and e-mails when the score drops or a new error/warning appears. Needs the signed-in account (its browser session cookie); a guest token gets 403 `account_required`. When a plan ends, the pages beyond the

  • lab_test

    Starts a lab test of an audit's page: Lighthouse run by Google PageSpeed Insights (performance, accessibility, best practices, SEO). Answers 202 at once; the test takes ~25 s to 2+ minutes — then read it with lab_result. Does not change the audit score. Answers **202** at once; t

  • lab_result

    The lab tests of an audit (mobile and desktop): running, finished with scores, metrics and biggest savings, or failed. With wait (up to 25) it answers as soon as a running test finishes. Long-poll: with `wait` the answer comes as soon as a running test finishes, or after `wait` s

  • get_audit

    Re-read an audit with its findings and evidence. Use generate_fix_prompt for correction steps. Re-reading costs nothing and does not count against the allowance — the page's HTML is not kept, but the report is.

  • get_badge

    Metadata and markdown of the SVG badge of a shared report.

  • embed_snippet

    The embeddable widget's snippet, already assembled with the site's name and colour — one script tag, no account, no lead capture. One script tag puts the audit form on your own site, with your name and colour, and no account or key. Send the same query you would send to `/embed`

  • billing

    Read free allowances, prices and the account's 7-day trial. Each audit beyond the daily allowance costs $0.02. Hourly limits still apply.

  • list_plans

    The plans for sale, with price and term, and the account's active plan. Each purchase lasts 30 days, with no automatic renewal. Each purchase lasts 30 days, with no automatic renewal. Without an account or wallet credential, `account` is `null`. Daily monitoring requires an accou

  • buy_plan

    Buy a plan: starter (25 more pages), pro (100 more pages), agency (300 more pages). Each purchase lasts 30 days, with no automatic renewal. Answers 402 with the price; pay with x402 or prepaid credit and repeat. Each purchase lasts 30 days, with no automatic renewal. Without paym

  • cancel_plan

    Cancel the active plan. Nothing else is charged; a purchase under 7 days and a paid period that has not started are refunded and end now, and the rest of the paid period stays active until keeps_until. Requires accept_data_removal: true. Send `{ "accept_data_removal": true }`. Th

  • contact

    Write to the people behind the product: a question, or a sponsorship/partnership/advertising proposal. Free, no captcha and no payment; one message every 10 s per network (one that arrives sooner waits its turn). One route for a question and for a sponsorship, partnership or ad p

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 8, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified against the domain pageaudit.online (the registry checks domain ownership)

  • … Not checked yet

    Still maintained

    We have not read this repo from GitHub yet

  • … Not checked yet

    Has a licence

    We have not read this repo from GitHub yet

  • ✓ Pass

    Endpoint responds

    Responded in 614 ms (HTTP 200)

  • – Not applicable

    Sign-in with OAuth

    No sign-in needed

  • ✓ Pass

    No hidden instructions in tool descriptions

    Read 60 tool descriptions and found no hidden instructions to the AI

Compared with others in Cybersecurityi

  • More stars than 0% of the other 1000 servers in this category
  • Published to the registry more recently than 62% of the other 1000 servers in this category
  • Basic checks equal to or better than 100% of the other 1000 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Pageaudit safe?

It passed 3 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.0.1) reached the registry 24 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.

What can I use instead?

In the same category: Phishnoo Sandbox, Zovo Dependency Audit, TeamOnly

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Phishnoo Sandbox

Explore synthetic security awareness metrics and file example threat reports.

by api.phishnoo.nlEarlyUpdated today

Runs in the cloud✓ api.phishnoo.nl

Zovo Dependency Audit

Audit a dependency list for known vulnerabilities, licenses and outdated versions.

by theluckystrikeEarlyUpdated today

Runs in the cloud

TeamOnly

Deploy AI-built internal apps behind your company login, with a database, files and secrets.

by sohelsdVery new↓ 315/wkUpdated today

Runs on your computer✓ teamonly.dev

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

PageAudit — skill and MCP server for AI agents

PageAudit checks a web page and returns evidence with suggested changes. One call reads the title, description, canonical, robots rules, Open Graph, headings, structured data (JSON-LD), security headers and page delivery. It can compare a deploy preview with production and show only what got worse. This repository packages the PageAudit skill and the connection to its remote MCP server for Claude Code, Codex, Cursor and other agents.

Site: https://pageaudit.online · MCP server: https://pageaudit.online/mcp?checkout=site · Prices: https://pageaudit.online/pricing · API docs: https://pageaudit.online/developers

What your agent can do

  • Audit a URL in one call: score, findings with evidence, and the raw JSON-LD and response headers.
  • Request a correction prompt with evidence, suggested changes and verification steps.
  • Compare a page with an earlier audit of the same owner, by finding code: what appeared and what disappeared.
  • Keep pages in tabs, re-run them, read their history and watch them daily for regressions.
  • Run a Lighthouse lab test through Google PageSpeed Insights and read the scores.

Try: *"Audit https://example.com and give me the head tags to fix."* or *"Compare the preview of this deploy with production and tell me what got worse."*

GitHub Actions

wrpbr/pageaudit-action audits each deploy preview against production and writes what got worse in the job summary. It can fail the job on a regression. Without any YAML, the PageAudit GitHub App puts a PageAudit check run on the commit of each preview deployment.

Install

Claude Code, as a plugin with the skill and the MCP server:

/plugin marketplace add wrpbr/pageaudit

/plugin install pageaudit@pageaudit

Any agent that reads Agent Skills (Claude Code, Codex, Cursor, OpenCode and others):

npx skills add wrpbr/pageaudit

Only the MCP server (remote, Streamable HTTP, no key needed to start):

claude mcp add --transport http pageaudit 'https://pageaudit.online/mcp?checkout=site'   # Claude Code

codex mcp add pageaudit --url 'https://pageaudit.online/mcp?checkout=site' # Codex

{ "mcpServers": { "pageaudit": { "url": "https://pageaudit.online/mcp?checkout=site" } } }

The JSON above goes in .cursor/mcp.json for Cursor and in the MCP settings of most other clients. For the GitHub Copilot coding agent, add it in the repository settings, under Copilot → MCP servers, with "type": "http" and the tools you allow, for example audit_url and generate_fix_prompt.

Price

Audits have a free daily allowance. The current allowances, the options past them and their prices are at https://pageaudit.online/pricing. The daily watch needs an account. Check the renewal conditions before purchase. The plugin never pays: with checkout=site, the MCP server has no purchase tool and no payment argument.

What the plugin sends

The skill tells the agent to call the PageAudit API at pageaudit.online. The MCP server also runs at pageaudit.online. The URLs you audit go to pageaudit.online over HTTPS, and PageAudit fetches those pages. The plugin runs no local program and reads no local file.

Em português

O PageAudit confere uma página como um buscador e um revisor atento fariam, e devolve a correção: título, descrição, canonical, robots, Open Graph, cabeçalhos, JSON-LD, cabeçalhos de segurança e entrega da página, com a evidência e a mudança sugerida para cada problema. Também compara a prévia de um deploy com a produção e mostra só o que piorou. Instale com os comandos acima. Os preços estão em https://pageaudit.online/pricing.

Files

FileWhat it is
skills/pageaudit/SKILL.mdThe skill: which tool answers which question, and the rules for limits and payment
.mcp.jsonThe remote MCP server of the plugin
.claude-plugin/plugin.jsonThe plugin manifest
.claude-plugin/marketplace.jsonLets Claude Code add this repository as a plugin marketplace
server.jsonThe manifest in the official MCP registry (online.pageaudit/pageaudit)
glama.jsonThe maintainer for the Glama MCP directory

License and contact

The files in this repository are under the MIT-0 license. The PageAudit service is not part of this license: its use follows the terms of use and the privacy policy. For questions or problems, open an issue here or write to contato@pageaudit.online.

Ask PopNx