Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "cookieinspector": {
      "type": "http",
      "url": "https://api.cookieinspector.com/mcp"
    }
  }
}

claude mcp add --transport http cookieinspector https://api.cookieinspector.com/mcp

[mcp_servers.cookieinspector]
url = "https://api.cookieinspector.com/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cookieinspector": {
      "type": "remote",
      "url": "https://api.cookieinspector.com/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "cookieinspector": {
      "type": "http",
      "url": "https://api.cookieinspector.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=cookieinspector&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLmNvb2tpZWluc3BlY3Rvci5jb20vbWNwIn0%3D"
}

{
  "servers": {
    "cookieinspector": {
      "type": "http",
      "url": "https://api.cookieinspector.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "cookieinspector": {
      "httpUrl": "https://api.cookieinspector.com/mcp"
    }
  }
}

extensions:
  "cookieinspector":
    enabled: true
    name: "cookieinspector"
    type: streamable_http
    uri: "https://api.cookieinspector.com/mcp"
    timeout: 300

Quality 90 / 100new

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene93 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations9 of 9 tools declare readOnlyHint or destructiveHint
warn
tools.directory_hints2 of 9 tools declare all four hints; missing: get_scan_summary (openWorldHint); list_scans (openWorldHint); get_scan_status (openWorldHint); …
pass
tools.token_costabout 1,251 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pulltool history recorded for 0 of the 7 days needed

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

9 tools, about 1,251 tokens to load them all · tool set 19dc8a161c89 · checked 2026-10-20 17:34 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository

provenance55

liveness100

freshness100

hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-1d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://api.cookieinspector.com/mcp` streamable-http	none	yes	100%	290 ms	2026-07-28	2026-10-20

Tools (9)

`explain_finding`read-only	Explain a CookieInspector finding code (e.g. THIRD_PARTY_PRE_CONSENT) or what to check in a named consent platform (e.g. Cookiebot). No network call. Technical findings, not legal advice.
`get_capabilities`read-only	Describe what CookieInspector checks on a website (cookies and trackers before and after the consent click, banner behaviour, consent platform, Google Consent Mode), which tools work without an account, which need a CookieInspector API key, and the quotas. Call this first when unsure which tool to use. Technical findings, not legal advice.
`get_prescan_result`read-only	Return the result of a pre-scan started with prescan_site: riskScore (0 best, 100 worst, the same scale as the full report), risk level, how many cookies load before consent, up to five trackers by name, the consent platform and its confidence, Google Consent Mode status, three findings, and the report link. This is a header-and-HTML pre-scan, single page; the full scan with a real browser, evidence and fix guide requires a CookieInspector account. Technical findings, not legal advice.
`get_scan_findings`read-only	The findings of a scan on the connected account, with severity, the affected resource and the recommendation, up to 25. Use explain_finding for what a code means. Technical findings, not legal advice.
`get_scan_status`read-only	Status of a scan on the connected account: queued, running, completed or failed, with the riskScore (0 best, 100 worst) once done. Technical findings, not legal advice.
`get_scan_summary`read-only	Summary of a completed scan on the connected account: risk score (0 best, 100 worst), verdict, banner and consent platform, cookie and tracker counts, the top issues and the report link. Technical findings, not legal advice.
`list_scans`read-only	The most recent scans on the connected account, newest first (up to 20), each with its riskScore (0 best, 100 worst). Technical findings, not legal advice.
`prescan_site`	Start a quick, anonymous pre-scan of a public website's home page: HTTP headers and HTML only, no real browser. Returns a preScanId to pass to get_prescan_result and a link to the report on cookieinspector.com. CookieInspector works alongside any consent platform; it checks what the banner actually does. Technical findings, not legal advice.
`start_scan`	Start a full CookieInspector scan with a real browser (before and after the consent click, up to 5 pages) on the connected account. Optional region: main (US East), us-west, eu-de (Germany, for EU-targeted banners). Uses the plan's monthly scans. Returns a scanId to poll with get_scan_status, then get_scan_summary. Technical findings, not legal advice.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.cookieinspector/cookieinspector",
  "icons": [
    {
      "src": "https://www.cookieinspector.com/assets/mcp-icon.png",
      "sizes": [
        "512x512"
      ],
      "mimeType": "image/png"
    }
  ],
  "title": "CookieInspector",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.cookieinspector.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://www.cookieinspector.com/developers/mcp",
  "description": "Check what a site's cookie banner really blocks: CMP, trackers, cookies before consent."
}