protogrid

Search / com.realmarketlabs.tools/site-check

RealMarket Site Check

R0· no sign-in

Passive checks of a public website: email authentication (SPF, DKIM, DMARC) and basic security.

v2 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality91strong
Trust82of 100
Uptime, 30 days97%
Latency p50514 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "site-check": {
      "type": "http",
      "url": "https://tools.realmarketlabs.com/mcp/site-check"
    }
  }
}
claude mcp add --transport http site-check https://tools.realmarketlabs.com/mcp/site-check
[mcp_servers.site-check]
url = "https://tools.realmarketlabs.com/mcp/site-check"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "site-check": {
      "type": "remote",
      "url": "https://tools.realmarketlabs.com/mcp/site-check",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "site-check": {
      "type": "http",
      "url": "https://tools.realmarketlabs.com/mcp/site-check"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=site-check&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdG9vbHMucmVhbG1hcmtldGxhYnMuY29tL21jcC9zaXRlLWNoZWNrIn0%3D"
}
{
  "servers": {
    "site-check": {
      "type": "http",
      "url": "https://tools.realmarketlabs.com/mcp/site-check"
    }
  }
}
{
  "mcpServers": {
    "site-check": {
      "httpUrl": "https://tools.realmarketlabs.com/mcp/site-check"
    }
  }
}
extensions:
  "site-check":
    enabled: true
    name: "site-check"
    type: streamable_http
    uri: "https://tools.realmarketlabs.com/mcp/site-check"
    timeout: 300

Quality 91 / 100strong

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations3 of 3 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 612 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
  • pass
    tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
  • pass
    stability.new_linksno tool change named a new site
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

3 tools, about 612 tokens to load them all · tool set aee95da19253 · checked 2026-11-14 07:36 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 82 / 100

no-repository
provenance55
liveness99
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-97% +updated-10d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://tools.realmarketlabs.com/mcp/site-check streamable-httpnoneyes97%514 ms2025-11-252026-11-14

Tools (3)

check_ai_built_appread-onlyReads the public pages and public JavaScript of a web app (typically built with Lovable, Bolt, v0, Replit or similar) and reports exposed API keys, public source maps, missing security headers, stale deploys, missing error monitoring and AI model calls made from the browser. Passive check: it never logs in, submits forms or probes private routes.
check_site_email_securityread-onlyChecks whether a domain's email is likely to reach the inbox (SPF, DKIM and DMARC records, mail servers) and whether the website has basic security in place (HTTPS, security headers, WordPress exposure, Lovable/Supabase setup). Reads only public DNS records and the public home page. The report is written in Portuguese.
diagnose_shopify_storeread-onlyReads the public pages of a Shopify store and reports whether it offers social login and a wishlist, how many products show as sold out, and whether it runs storefronts for several countries. Reads only public pages.

Schemas: list_tools.

Similar MCP servers

More from com.realmarketlabs.tools

Official server.json
{
  "name": "com.realmarketlabs.tools/site-check",
  "icons": [
    {
      "src": "https://realmarketlabs.com/static/apple-touch-icon.png",
      "sizes": [
        "180x180"
      ],
      "mimeType": "image/png"
    }
  ],
  "title": "RealMarket Site Check",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://tools.realmarketlabs.com/mcp/site-check",
      "type": "streamable-http"
    }
  ],
  "version": "2",
  "websiteUrl": "https://tools.realmarketlabs.com/",
  "description": "Passive checks of a public website: email authentication (SPF, DKIM, DMARC) and basic security."
}