Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "validoria-mcp": {
      "type": "http",
      "url": "https://api.teste.no/api/mcp"
    }
  }
}

claude mcp add --transport http validoria-mcp https://api.teste.no/api/mcp

[mcp_servers.validoria-mcp]
url = "https://api.teste.no/api/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "validoria-mcp": {
      "type": "remote",
      "url": "https://api.teste.no/api/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "validoria-mcp": {
      "type": "http",
      "url": "https://api.teste.no/api/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=validoria-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLnRlc3RlLm5vL2FwaS9tY3AifQ%3D%3D"
}

{
  "servers": {
    "validoria-mcp": {
      "type": "http",
      "url": "https://api.teste.no/api/mcp"
    }
  }
}

{
  "mcpServers": {
    "validoria-mcp": {
      "httpUrl": "https://api.teste.no/api/mcp"
    }
  }
}

extensions:
  "validoria-mcp":
    enabled: true
    name: "validoria-mcp"
    type: streamable_http
    uri: "https://api.teste.no/api/mcp"
    timeout: 300

Quality 72 / 100needs work

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene57 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_incident (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_keywords (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_finding (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
warn
tools.token_costabout 12,063 tokens to load every tool
warn
tools.api_dump74 tools, 69% named like REST operations: looks like an API mapped one endpoint per tool

stability100 · weight 15

pass
stability.changes4 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependencies67 · weight 15

pass
deps.known_vulnsno known advisory in 98 resolved packages
fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
pass
deps.resolvable[email protected] resolved: 98 packages

74 tools, about 12,063 tokens to load them all · tool set 664fb245cb46 · tools last changed 2026-10-11 · checked 2026-10-20 17:34 UTC

Tool changes

2026-10-11add_keywordchangeddescription, input schema
before
Add an SEO keyword to track for a target. Max 50 keywords per target.
after · 77% of words in common
Add an SEO keyword to track for a target, optionally for one page (pageUrl). Max 50 keywords per target.
2026-10-11list_keywordschangeddescription
before
List all SEO keywords tracked for a target, including latest Google rank position. Max 50 per target.
after · 76% of words in common
List all SEO keywords tracked for a target, including latest Google rank position and the page each is tracked for. Max 50 per target.
2026-10-04update_team_settingschangedinput schema
2026-10-02get_target_scoreschangeddescription
before
Get composite scores (Security, SEO, Performance, Accessibility) for a target. Each score is 0-100 with a status rating.
after · 86% of words in common
Get composite scores (Security, SEO, Performance, Accessibility, AI-search readiness) for a target. Each score is 0-100 with a status rating.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 80 / 100

no-repository

provenance55

liveness100

freshness85

hygiene80

+dns-namespace +website +reachable +uptime-99% ~updated-71d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisory	severity	package	fixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.31.0`

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://api.teste.no/api/mcp` streamable-http	none	yes	99%	1184 ms	2025-11-25	2026-10-20

package	registry	version	runtime	secrets
`validoria-mcp`	npm	2.0.1	–	`TESTE_NO_API_KEY`

Tools (74)

`acknowledge_incident`	Acknowledge an open incident to signal that someone is looking at it. Changes status from OPEN to ACKNOWLEDGED.
`active_runs`	Get currently running and queued tests across all targets. Useful for checking what tests are in progress right now.
`add_keyword`	Add an SEO keyword to track for a target, optionally for one page (pageUrl). Max 50 keywords per target.
`analyze_target`	Fingerprint a URL and get test recommendations before creating a target. Detects platform (Shopify, WordPress, etc.), CDN, server stack, frontend framework, analytics, and B2B/ecommerce signals. Returns recommended tests with explanations. Use this before create_target to know what type to assign and which tests will be enabled.
`cancel_load_test`	Cancel a running load test.
`create_automation_rule`	Create an automation rule that reacts to events. Triggers: TEST_FAILED, TEST_RECOVERED, INCIDENT_CREATED, INCIDENT_RESOLVED, TARGET_DOWN, TARGET_RECOVERED. Actions: escalate (change severity), suppress (mute), rerun (schedule retry), notify, webhook, add_note.
`create_journey`	Create a custom browser test flow for a target. Steps are executed sequentially in a Playwright browser. Supports actions: navigate, click, type, fill, select, assert, wait, screenshot, scroll, hover, use_fragment. Variables like {{LOGIN_EMAIL}} are resolved from the target secrets vault.
`create_maintenance_window`	Schedule a maintenance window for a target. During maintenance, alerts and notifications are suppressed. Supports one-time, daily, and weekly recurring windows.
`create_muting_rule`	Create a rule to auto-mute findings matching a pattern. Existing open findings matching the rule are muted immediately. Supports muting by fingerprint pattern, test definition, or test+target combination.
`create_notification_rule`	Create a notification alert rule. Defines which events at which severity levels trigger notifications on which channels. Supports quiet hours and per-target scoping.
`create_page_fragment`	Create a reusable step sequence that can be shared across multiple Journeys. Fragment names must be unique per team.
`create_scheduled_report`	Create a new scheduled email report. Reports include run stats, open findings, composite scores, and per-target status.
`create_target`	Add a new website, API, or webshop target for monitoring with full onboarding. Automatically enables compatible tests, triggers an initial scan, and captures a page screenshot. Requires write scope (Free plan: 1 target). Use analyze_target first to detect platform and get test recommendations.
`daily_trends`	Get daily time-series data for runs, findings, and average duration. Useful for identifying trends over time. Returns up to 90 days of data.
`delete_automation_rule`	Permanently delete an automation rule.
`delete_journey`	Permanently delete a journey and all its steps.
`delete_maintenance_window`	Remove a scheduled maintenance window.
`delete_notification_rule`	Permanently delete a notification rule.
`delete_page_fragment`	Permanently delete a page fragment.
`delete_scheduled_report`	Permanently delete a scheduled report.
`delete_secret`	Permanently delete a secret from a target's vault.
`delete_target`	Permanently delete a target and all its associated data (runs, findings, incidents, artifacts). This cannot be undone.
`disable_all_tests`	Disable all test definitions globally. Optionally filter by category to only disable tests in that category. Requires admin scope.
`enable_all_tests`	Enable all test definitions globally. Optionally filter by category to only enable tests in that category. Requires admin scope.
`get_automation_rule`	Get full details of a specific automation rule.
`get_finding`	Get full details of a specific finding, including evidence, AI analysis, and recommended fix.
`get_incident`	Get full details of a specific incident including linked findings, AI analysis, and deployment correlation.
`get_journey`	Get full details of a specific journey including all steps.
`get_load_test`	Get details and results of a load test run.
`get_run`	Get full details of a specific test run including metrics, score, summary, errors, and associated findings.
`get_site_map`	Get the latest crawl snapshot for a target. Returns page inventory stats, SEO issues, broken pages/assets, response times, and a diff against the previous crawl. Optionally include page-level details.
`get_target`	Get detailed information about a specific target including status, uptime, fingerprint, and composite scores.
`get_target_scores`	Get composite scores (Security, SEO, Performance, Accessibility, AI-search readiness) for a target. Each score is 0-100 with a status rating.
`get_team_settings`	Get the team's configuration including AI enrichment, uptime monitoring, severity escalation, run policies, notification coalescing, SEO, and Kloner Tasks integration settings.
`guest_get_scan`	Poll results for a guest_start_scan. Pass the scanId and guestSessionId from the start response. No API key required.
`guest_start_scan`	Run a free 6-test HTTP scan against a public URL without an API key. Rate-limited (5/IP/hour, 3/session/day). Returns scanId — poll with guest_get_scan. For continuous monitoring, sign up free and use create_target. See teste-no://docs/quickstart.
`import_targets`	Bulk import up to 100 websites for monitoring. Each URL gets a target created with auto-enabled tests, initial scan, and screenshot capture. Partial success — failed URLs are reported individually without blocking others.
`list_automation_rules`	List all automation rules for the team. Rules automatically react to events (test failures, incidents, downtime) with configurable actions (escalate severity, suppress, rerun, webhook, notify).
`list_findings`	List findings (discovered issues) across your targets. Filter by status, severity, or target. Returns title, severity, status, test name, and AI enrichment if available.
`list_incidents`	List incidents (grouped operational issues) across your targets. Filter by status. Returns title, severity, status, findings count, and deployment correlation.
`list_journeys`	List custom browser test flows (journeys) for a target or all team targets. Journeys are multi-step Playwright tests that verify user flows like checkout, login, and search.
`list_keywords`	List all SEO keywords tracked for a target, including latest Google rank position and the page each is tracked for. Max 50 per target.
`list_load_tests`	List recent load test runs for a target.
`list_maintenance_windows`	List maintenance windows for a target. Shows scheduled and recurring maintenance periods that suppress alerts.
`list_notification_channels`	List all notification channels (Email, Slack, Webhook, SMS, Web Push) configured for the team. Sensitive config values are redacted.
`list_notification_rules`	List all notification alert rules for the team. Rules map event types + severity levels to notification channels.
`list_page_fragments`	List all reusable page fragments for the team. Fragments are shared step sequences (e.g. "Login", "Dismiss Cookies") that can be inserted into multiple Journeys via the use_fragment action.
`list_runs`	List recent test runs. Filter by target, status, or test slug. Returns run status, score, summary, duration, and finding count.
`list_scheduled_reports`	List all scheduled reports for the team. Reports are automatically generated and emailed on a daily or weekly basis.
`list_secrets`	List secrets stored in a target's vault. Values are masked — only key names and labels are shown. Secrets are used by test plugins (e.g. LOGIN_EMAIL, LOGIN_PASSWORD for B2B shops, ga4_service_account for GA4).
`list_targets`	List all monitoring targets for your team. Returns name, URL, type, status, and uptime info for each target.
`list_tests`	List all available test definitions (plugins). Shows slug, name, category, runner type, weight class, schedule, and enablement status. Useful for knowing which tests can be triggered.
`mute_finding`	Mute an open finding to suppress it from dashboards and alerts. Status changes from OPEN to MUTED.
`recompute_scores`	Force recompute all composite scores (Security, SEO, Performance, Accessibility) for a target. Useful after manual changes or when scores seem stale.
`record_deployment`	Record a deployment event for a target. Deployments are auto-correlated with incidents created within 20 minutes. Useful for tracking releases and root-cause analysis.
`remove_keyword`	Remove an SEO keyword from a target.
`resolve_incident`	Resolve an incident to mark it as handled. Changes status to RESOLVED and sets the closed timestamp.
`rotate_secret`	Update the value of an existing secret.
`start_load_test`	Start a load test against a target. Max 100 concurrent connections, max 5 min duration, 1 test at a time per target, 60s cooldown between tests. Modes: HTTP_FLOOD (autocannon), BROWSER_USERS (Playwright), COMBINED (both). OWNER/ADMIN only.
`store_secret`	Store an encrypted secret in a target's vault. Common keys: LOGIN_EMAIL, LOGIN_PASSWORD (B2B shop auth), ga4_service_account (GA4 monitoring). Values are AES-256-GCM encrypted at rest.
`system_health`	Get a comprehensive system health report: BullMQ queue depths, active/stuck runs, user sessions, notification delivery stats, and recent error counts. Requires admin scope.
`target_stats`	Get statistics for a specific target: runs, pass rate, findings, duration. Supports lifetime, monthly, or weekly periods.
`team_stats`	Get team-wide overview statistics: total runs, pass rate, open findings, open incidents, average duration. Supports lifetime, monthly, or weekly periods.
`trigger_all_tests`	Run all enabled tests against a target as a scan workflow. All tests in the target's test profile are queued. Returns the workflow ID and list of queued runs.
`trigger_journey`	Execute a journey (custom browser test flow) against its target. The journey runs asynchronously — use get_run to check progress.
`trigger_test`	Run a specific test against a target. Specify either the test definition ID or slug. The test is queued and executed asynchronously — use get_run to check status.
`update_automation_rule`	Update an existing automation rule. Any field not provided will remain unchanged.
`update_journey`	Update a journey's name, settings, or steps. When steps are provided, all existing steps are replaced.
`update_notification_rule`	Update a notification rule. Only provided fields are changed.
`update_page_fragment`	Update a page fragment. When steps are provided, all existing steps are replaced.
`update_scheduled_report`	Update an existing scheduled report. Any field not provided stays unchanged.
`update_target`	Update a target's properties (name, URL, type, environment, business weight, tags, uptime toggle).
`update_team_settings`	Update team configuration. All fields are optional — only provided fields are changed. Covers: AI enrichment (model, temperature, auto-enrich, spending cap), uptime (timeout, thresholds), severity escalation (recurrence/age triggers), run policies (concurrency, timeouts), SEO (rank tracking, keyword strategy), notification coalescing (digest), and the kill switch (testsPaused).
`update_test`	Enable or disable a test definition globally, or update its schedule/timeout. Requires admin scope.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.validoria/validoria-mcp",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.teste.no/api/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "2.0.1",
  "packages": [
    {
      "version": "2.0.1",
      "transport": {
        "type": "stdio"
      },
      "identifier": "validoria-mcp",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "TESTE_NO_API_KEY",
          "format": "string",
          "isSecret": true,
          "isRequired": true,
          "description": "Your Teste.no API token (Settings → API Keys). Prefix: tno_"
        },
        {
          "name": "TESTE_NO_API_URL",
          "format": "string",
          "default": "https://api.teste.no",
          "description": "API base URL. Override only for self-hosted instances."
        }
      ]
    }
  ],
  "websiteUrl": "https://validoria.com",
  "description": "Continuous website testing by Validoria — monitor security, SEO, performance, and accessibility."
}