io.simplyscan/simplyscan · v1.0.0 · security
SimplyScan is healthy: it completed an MCP handshake in 4159 ms and exposes 7 tools.
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
Endpoint: https://api.simplyscan.io/mcp (streamable-http)
No repository listed · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 7 |
| Latency | 4159 ms |
| Last checked (UTC) | 2026-10-15T11:50:16.848Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-10-15T11:50:16.848Z | Healthy | 4159 |
scan_website | Run a free SimplyScan security & speed scan of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0, Cursor, Replit, etc. |
check_security_headers | Grade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F. |
check_ai_visibility | AEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals. |
check_seo | On-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade. |
check_ssl | Inspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs. |
check_email_security | Check a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains. |
check_exposed_files | Probe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents. |