Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "webskan": {
      "type": "http",
      "url": "https://webskan.com/mcp",
      "headers": {
        "Authorization": "Bearer ${WEBSKAN_TOKEN}"
      }
    }
  }
}

claude mcp add --transport http webskan https://webskan.com/mcp --header "Authorization: Bearer ${WEBSKAN_TOKEN}"

[mcp_servers.webskan]
url = "https://webskan.com/mcp"
bearer_token_env_var = "WEBSKAN_TOKEN"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "webskan": {
      "type": "remote",
      "url": "https://webskan.com/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:WEBSKAN_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "webskan": {
      "type": "http",
      "url": "https://webskan.com/mcp",
      "headers": {
        "Authorization": "Bearer ${WEBSKAN_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=webskan&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vd2Vic2thbi5jb20vbWNwIiwiaGVhZGVycyI6eyJBdXRob3JpemF0aW9uIjoiQmVhcmVyICR7V0VCU0tBTl9UT0tFTn0ifX0%3D"
}

{
  "servers": {
    "webskan": {
      "type": "http",
      "url": "https://webskan.com/mcp",
      "headers": {
        "Authorization": "Bearer ${WEBSKAN_TOKEN}"
      }
    }
  }
}

{
  "mcpServers": {
    "webskan": {
      "httpUrl": "https://webskan.com/mcp",
      "headers": {
        "Authorization": "Bearer ${WEBSKAN_TOKEN}"
      }
    }
  }
}

extensions:
  "webskan":
    enabled: true
    name: "webskan"
    type: streamable_http
    uri: "https://webskan.com/mcp"
    headers:
      "Authorization": "Bearer ${WEBSKAN_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${WEBSKAN_TOKEN}. The registry never accepts secret values.

Quality 81 / 100new

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations4 of 4 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_audit (destructiveHint, idempotentHint, openWorldHint); recheck_website (destructiveHint, idempotentHint); scan_website (destructiveHint, idempotentHint); …
pass
tools.token_costabout 922 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pulltool history recorded for 0 of the 7 days needed

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

4 tools, about 922 tokens to load them all · tool set 4a568e2df1c1 · checked 2026-11-07 18:01 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 93 / 100

provenance90

liveness87

freshness100

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-67% +updated-1d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://webskan.com/mcp` streamable-http	none	yes	67%	255 ms	2025-11-25	2026-11-07

Tools (4)

`audit_website`read-only	Starts a full technical audit of a whole website and returns immediately with an auditId (poll get_audit every 20-30 s; typically done in 1-5 min). The audit crawls up to `pages` pages (1-30, default 15) following internal links and the sitemap, and checks: broken internal/external links with the pages they sit on, per-page SEO (title, description, H1, canonical, alt texts, Open Graph), Lighthouse mobile and desktop, WCAG accessibility (axe) with selectors, HTTPS/TLS/security headers, robots/sitemap, platform detection and customer journeys (menu, search, forms, 404). No LLM, deterministic, read-only. Free plan: 2 audits per IP per 24 h and 1 per host per 24 h (a repeat call for the same host returns the existing audit). With Authorization: Bearer <Webskan Developer license key>: 30 per 24 h.
`get_audit`read-only	Returns the status (queued / running with ETA) or the finished result of an audit started with audit_website or recheck_website: summary counts by severity, Lighthouse mobile+desktop scores, findings sorted high → medium → low → info (each with id, area, severity, title, detail and the pages it was found on), pagesCrawled, finalUrl, platform. For a re-check it also returns diff: fixed / open / new / unverified findings and Lighthouse before/after. Poll every 20-30 s while status is queued or running.
`recheck_website`read-only	Runs the same audit again (same URL, same number of pages) linked to the original auditId, so get_audit returns a diff: fixed / still open / new / unverified findings and Lighthouse before → after. Call it after you have deployed fixes. Asynchronous like audit_website (returns a new auditId to poll with get_audit) and counted against the same limits (free: 2 audits per IP per 24 h).
`scan_website`read-only	Quick scan of one page (the URL you pass, usually the home page): Lighthouse mobile scores (performance, accessibility, best practices, SEO) with LCP/CLS/TBT/page weight/requests, plus HTTPS redirect, TLS, HSTS and security headers, title, meta description, H1, image alt texts, viewport, canonical, Open Graph, mixed content. Takes 30-60 s; waits up to 90 s and otherwise returns status "pending" with a scanId – call again with the same URL in 30 s. Results per host are cached for 24 h (field cached: true). Free, 10 calls per hour per IP. Use it right after a deploy as a smoke check; use audit_website for the whole site.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.kamilobstawskiagent-ux/webskan",
  "title": "Webskan",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://webskan.com/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "description": "Optional. 'Bearer <license key>' for the paid plan (coming soon); omit for the free plan."
        }
      ]
    }
  ],
  "version": "0.1.0",
  "repository": {
    "url": "https://github.com/kamilobstawskiagent-ux/webskan-claude-plugin",
    "source": "github"
  },
  "websiteUrl": "https://webskan.com/developers/",
  "description": "Audit and re-check a live website: Lighthouse, SEO, accessibility, security, links, journeys."
}