MCP servers › io.github.bck-stack › sitecheck-web-intel

MCP server · registry snapshot 2026-10-24 · last tested 2026-10-24

io.github.bck-stack/sitecheck-web-intel

129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402 — the publisher's description

1 of 2 record checks metRead-only · tools listed 2026-10-24version 1.0.0streamable HTTP129 tools

Summary

io.github.bck-stack/sitecheck-web-intel is a remote MCP server listed in the official MCP registry at version 1.0.0. On 2026-10-24 ProtocolProbe connected to it in read-only mode and read its inventory: 129 tools, 0 resources and 0 prompts.

Record checks

1 of 2 record checks met · 7 do not apply

met: Registry entry is active and says how to run it
not met: Source repository link opens
not applicable: Repository is not archived
not applicable: Code pushed to the repository in the 90 days before our check
not applicable: Repository publishes a security policy (SECURITY.md)
not applicable: Package names its licence with a standard (SPDX) identifier
not applicable: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
not applicable: No known critical or high advisory in the package or its dependencies

From public records, not a safety rating. Each check with its reason

Key facts

Runs: remote (hosted by the publisher)
Transport: streamable HTTP
Sign-in: none needed to open a session
Tools: 129
Last tested: 2026-10-24

Add to your client

How fresh this is

Live-tested: yes, a real session (not a text-only review)
Last tested: 2026-10-24
Mode: read-only (no tool calls)
Latest version: 1.0.0, published 2026-10-23 (registry, as of the 2026-10-24 snapshot)
First listed version: 2026-10-23 (earliest version still in the registry; older removed versions would be earlier)
Registry data: snapshot 2026-10-24
Package and repository: checked 2026-10-24
Engine: mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-23, listed on 2026-10-24 with version 1.0.0 (published 2026-10-23).

Source: the official MCP Registry list on 2026-10-23 and on 2026-10-24.

What it is

What does this server offer?

Observed inventory

129tools

0resources

0prompts

None of its 129 tools are described as changing anything. For 129 the reading was uncertain, so no mark is shown.

security_dns_records
“DNS records of a domain (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA) resolved live through the public AdGuard DNS JSON resolver (NextDNS as backup).”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- namestringrequired“Domain name, e.g.”
- typesstring“Comma list of record types from A,AAAA,MX,NS,TXT,CNAME,CAA,SOA (default A,AAAA,MX,NS,TXT)”
security_whois_rdap
“Domain registration facts via RDAP (IANA bootstrap, then the registry's own server): registration, last change and expiry dates, days left, registrar name, status flags, nameservers and DNSSEC delega…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as example.com (required)”
security_ssl_cert_chain
“HTTPS certificate chain and cipher audit for a host (port 443) from Qualys SSL Labs' cached report: grade, number of certificates in the chain, trust store, TLS versions, weak-cipher count, Heartblee…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- hoststringrequired“Host name such as wikipedia.org (required)”
security_crtsh_transparency
“Subdomain names found in public Certificate Transparency logs for a domain (via CertSpotter): unique host names and wildcard names, issuers, latest issue date and how many listed certificates are sti…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as wikipedia.org (required)”
security_ip_geolocation_asn
“IPv4 or IPv6 address → covering BGP prefix, origin AS number and holder name, whether the prefix is announced, and a coarse country and map point, all from RIPEstat.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 or IPv6 address such as 8.8.8.8 (required)”
security_security_headers
“Checks the live HTTP response headers of a site's home page (one GET, https) for Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissi…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as wikipedia.org (required)”
security_dmarc_spf_dkim
“Email authentication DNS records for a domain: DMARC policy (p, sp, pct, rua), SPF record and its all-mechanism, and DKIM public keys for a selector you give or for 8 common selectors (revoked keys a…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- domainstringrequired“Domain name such as google.com (required)”
- selectorstring“DKIM selector such as google, selector1 or k1 (optional; common selectors are tried when empty)”
security_urlhaus_malware
“Checks whether a host (domain or IP) is known to abuse.ch URLhaus as a malware distribution host: first seen, number of malware URLs, Spamhaus DBL / SURBL status and the latest URLs with status (onli…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- hoststringrequired“Domain or IPv4 address, e.g.”
security_phishtank_check
“Looks one http or https URL up in the PhishTank phishing database (live checkurl lookup, no key).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Full http or https URL to check (required)”
security_cve_nvd_lookup
“One CVE record from the NIST National Vulnerability Database: description, published and last-modified dates, NVD status, primary CVSS score and severity (v4.0, 3.1, 3.0 or 2.0, whichever NVD marks p…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- cveIdstringrequired“CVE identifier such as CVE-2021-44228 (required)”
security_tor_exit_nodes
“Checks an IPv4 address against the Tor Project's bulk exit list (about 1,200 active exit IPs).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 171.25.193.25 (required)”
security_vpn_proxy_detector
“Checks an IPv4 address against the public X4BNet list of commercial VPN provider address ranges (about 11,000 CIDR blocks, refreshed by the list's maintainer).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 2.26.157.10 (required)”

Show 88 more tools

security_shodan_host_summary
“Shodan InternetDB summary for an IPv4 address (free, no key): open TCP ports, host names seen, CPE software identifiers, tags and CVE IDs Shodan associates with the host.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 1.1.1.1 (required)”
security_censys_exposure
“Censys host view for an IPv4 address: the services, ports and protocols Censys has observed on it with their last scan time and detected software, plus autonomous system, location, network owner and …”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 8.8.8.8 (required)”
security_abuseipdb_check
“AbuseIPDB reputation for an IPv4 address over the last 90 days: abuse confidence score (0-100), number of abuse reports, last report date, ISP, usage type and country.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 185.220.101.1 (required)”
security_grey_noise_noise
“GreyNoise Community lookup for an IPv4 address: whether it was seen mass-scanning the internet recently (noise), whether it is a known benign service (riot), its classification (benign, malicious, un…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 185.220.101.1 (required)”
security_hibp_breach_check
“Lists the data breaches HaveIBeenPwned has recorded for a domain (breach name, breach date, accounts affected, data types exposed, verified flag).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as adobe.com (required)”
security_cisa_known_exploits
“CISA's Known Exploited Vulnerabilities catalog (public JSON).”
Publisher declares: read-only yes · open-world yes
2 inputs
- cveIdstring“CVE identifier to look up (optional)”
- limitstring“How many newest additions to list when no cveId is given, 1 to 50 (default 10)”
security_open_port_scanner
“Lists the TCP ports Shodan has seen open on an IPv4 address, from its pre-collected passive scan data (not a live scan: nothing connects to the address now).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 1.1.1.1 (required)”
security_dns_propagation
“Asks two independent public DNS resolvers (AdGuard DNS and NextDNS) for the same name and record type right now and reports whether they agree, with each answer set and its lowest TTL.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- namestringrequired“Host or domain name, e.g.”
- typestring“A, AAAA, MX, NS, TXT or CNAME (default A)”
security_reverse_dns_ptr
“Reverse DNS (PTR) names for an IPv4 address, and forward-confirmed reverse DNS: whether each PTR name resolves back (A record) to the same address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 8.8.8.8 (required)”
security_bgp_prefix_origin
“For an IPv4 prefix (e.g.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- prefixstringrequired“IPv4 prefix in CIDR form, e.g.”
security_dnssec_validator
“DNSSEC check for a domain: whether a DS record exists at the parent zone (the domain is signed), and whether two public validating resolvers (AdGuard DNS, NextDNS) return its A answer with the AD (au…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as example.com (required)”
security_cors_misconfig
“Checks how a site's home page answers a cross-origin request from a made-up origin: whether it echoes that origin back, sends a wildcard (*), and whether credentials are allowed with it.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as httpbin.org (required)”
security_cookie_security
“Lists the cookies a site sets on its public home page (one anonymous GET, no login) with their Secure, HttpOnly and SameSite flags, and flags the ones missing a flag.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as github.com (required)”
security_subdomain_takeover
“For a subdomain: finds its CNAME, matches the target against the public can-i-take-over-xyz fingerprint list (services such as GitHub Pages, S3, Azure, WordPress), checks whether the target still res…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- subdomainstringrequired“Host name to check, e.g.”
security_robots_security_txt
“Reads a site's public robots.txt (crawl rules, sitemaps, AI-crawler rules) and security.txt (RFC 9116: contact, expiry, policy), and says whether security.txt is present, current or expired.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as github.com (required)”
security_email_disposable
“Checks whether an email address's domain (or a domain you give) is on the community disposable and temporary email blocklist (about 9,900 domains).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- emailstringrequired“Email address or domain, e.g.”
security_domain_typosquatting
“For a brand domain, generates up to 24 lookalike names (letter omission, doubling and swapping, plus .co/.net/.org/.io swaps) and checks which ones have name servers in DNS right now.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Brand domain such as github.com (required)”
security_asn_peers_upstream
“For an autonomous system (e.g.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- asnstringrequired“AS number such as AS13335 or 13335 (required)”
security_tls_cipher_enum
“TLS versions a host accepts (SSL 3, TLS 1.0 and 1.1 flagged as deprecated) and its cipher-suite strength from Qualys SSL Labs' cached report: suite count per protocol, weak suites (RC4, 3DES, NULL, E…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- hoststringrequired“Host name such as wikipedia.org (required)”
security_open_resolver_check
“Reports whether Shodan's pre-collected passive scan data shows TCP port 53 (DNS) open on an IPv4 address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 8.8.8.8 (required)”
security_ntp_monlist_audit
“Reports whether Shodan's pre-collected passive scan data shows NTP (port 123) seen open on an IPv4 address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 129.6.15.28 (required)”
security_snmp_exposure
“Reports whether Shodan's pre-collected passive scan data shows SNMP (UDP port 161) seen open on an IPv4 address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 1.1.1.1 (required)”
security_ssh_banner_audit
“From Shodan's pre-collected passive scan data: whether TCP port 22 was seen open on an IPv4 address and any OpenSSH version identified in its software (CPE) list.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 185.220.100.240 (required)”
security_smb_exposure_test
“Checks Shodan's passive scan records for TCP port 445 (SMB) on an IPv4 address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 1.1.1.1 (required)”
security_rdp_exposure_check
“Checks Shodan's passive scan records for TCP port 3389 (RDP) on an IPv4 address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 1.1.1.1 (required)”
security_spameatingmonkey
“Checks an IPv4 mail-sending address against the SpamEatingMonkey DNS blocklist (bl.spameatingmonkey.net) through public DNS.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 185.220.101.1 (required)”
security_barracuda_reputation
“Checks an IPv4 mail-sending address against the Barracuda Reputation Block List (b.barracudacentral.org) through public DNS.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 127.0.0.2 (test entry) or a sending IP (required)”
security_spamhaus_zen
“Spamhaus blocklist check through Spamhaus's official Data Query Service: an IPv4 address against ZEN (SBL spam sources, CSS snowshoe, XBL exploited/botnet hosts, DROP hijacked ranges, PBL end-user ra…”
Publisher declares: read-only yes · open-world yes
2 inputs
- ipstring“IPv4 address, e.g.”
- domainstring“Domain name instead of an IP, e.g.”
security_surbl_uri_lookup
“Checks a domain against SURBL's multi-list (multi.surbl.org): whether it appears in spam or phishing URI lists.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as example.com (required)”
security_openphish_feed
“Checks a URL or host against the OpenPhish public phishing feed (about 300 currently active phishing URLs, updated continuously).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“A full http or https URL, or a host name such as example.com (required)”
security_threatfox_iocs
“Searches abuse.ch ThreatFox for indicators of compromise matching a term (IP, IP:port, domain, URL or file hash): IOC, type, malware family, threat type, confidence, first/last seen, reporter, tags a…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- termstringrequired“An IP, IP:port, domain, URL or hash to look for (required)”
- exactstring“true for exact match only (default false: partial match)”
- daysstring“Only IOCs first seen in the last N days, 1 to 365 (default: no limit)”
security_malbazaar_samples
“Looks up a file hash (SHA-256, SHA-1 or MD5) in abuse.ch MalwareBazaar: whether the sample is known, its other hashes, file name, type, size, signature (malware family), first/last seen, reporter, or…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- hashstringrequired“SHA-256 (64 hex), SHA-1 (40 hex) or MD5 (32 hex) of the file (required)”
- sha256string“Same as hash (older name)”
security_feodotracker_c2
“Checks an IPv4 address against the abuse.ch Feodo Tracker botnet C2 blocklist (Emotet, QakBot and similar).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 162.243.103.246 (required)”
security_sslbl_abuse_certs
“Checks a certificate SHA-1 fingerprint (40 hex characters) against the abuse.ch SSL Blacklist of certificates seen on malware botnet C2 servers.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- sha1stringrequired“Certificate SHA-1 fingerprint, 40 hex characters (required)”
security_ipsum_threat_level
“Checks an IPv4 address against IPsum, an aggregate of public blocklists: returns the number of source feeds that list it (its level, 1 to 8) and whether it is listed at all.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 185.220.101.1 (required)”
security_cymru_asn_lookup
“Maps an IPv4 address to its origin AS number, the BGP prefix that covers it, the country, the registry and the allocation date, using Team Cymru's public IP-to-ASN DNS service.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 8.8.8.8 (required)”
security_blocklist_de
“Checks an IPv4 address against the Blocklist.de 'all' list of IPs reported for attacks such as failed logins, SSH and mail abuse (about 24,000 addresses).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 1.10.176.3 (required)”
security_ciarmy_bad_ips
“Checks an IPv4 address against the CI Army (CINS Score) bad-IP list, a collective-intelligence list of addresses that recently showed hostile activity across a sensor network (about 15,000 entries).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“IPv4 address such as 1.117.61.172 (required)”
security_talos_ip_blacklist
“Cisco Talos reputation for an IPv4 address: threat level (favorable, neutral, poor, untrusted), web reputation score, forward/reverse DNS match, hostname, owner, location, email volume magnitude (dai…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- ipstringrequired“Public IPv4 address”
security_mx_server_test
“For a mail domain: lists up to 3 MX hosts with their IPv4 addresses and, from Shodan's pre-collected passive scan data, which SMTP ports (25, 465, 587) were seen open on each address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Mail domain such as gmail.com (required)”
security_dkim_key_checker
“Reads the DKIM public key published at <selector>._domainkey.<domain>: key type, whether it is revoked (empty p=), decoded key size in bytes and a strength hint (about 1024-bit vs 2048-bit RSA), and …”
Publisher declares: read-only yes · open-world yes
2 inputs, 2 required
- domainstringrequired“Sending domain such as mailchimp.com (required)”
- selectorstringrequired“DKIM selector such as k1 or google (required)”
security_bimi_record_audit
“Reads a domain's BIMI record (default._bimi.<domain> TXT): whether it is published, the SVG logo URL (l=) and the certificate URL (a=, a VMC or CMC for mailbox providers).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as ebay.com (required)”
security_mta_sts_validator
“Checks MTA-STS for a mail domain: the _mta-sts TXT record (v=STSv1 and id) and the HTTPS policy file (mode enforce, testing or none, the MX patterns and max_age).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Mail domain such as gmail.com (required)”
security_dns_caa_records
“Lists the CAA (Certification Authority Authorization) records published on a domain: which CAs may issue certificates (issue), wildcard certificates (issuewild) and the incident-report address (iodef…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as google.com (required)”
security_tls_alpn_detector
“Reports which newer HTTP protocols a site advertises: HTTP/3 (h3) and older draft or HTTP/2 alternatives in its Alt-Svc response header, and the Alt-Svc max-age.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as example.com (required)”
security_cert_revocation_crl
“For a domain's current certificate (taken from public Certificate Transparency data via CertSpotter): reads its CRL Distribution Point, downloads that public CRL, and reports whether the certificate'…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as wikipedia.org (required)”
security_mitre_attck_matrix
“Looks up one MITRE ATT&CK technique (e.g.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- techniquestringrequired“ATT&CK technique ID such as T1059 or T1059.001 (required)”
security_epss_exploit_score
“EPSS (Exploit Prediction Scoring System) for one CVE from FIRST's public API: the estimated probability (0 to 1) of exploitation in the next 30 days, its percentile among all scored CVEs and the scor…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- cveIdstringrequired“CVE identifier such as CVE-2021-44228 (required)”
security_cve_details_feed
“Vulnerability trend for a vendor (optionally one product) from the NIST NVD: CVEs published in the last N days (default 7, up to 120; a big vendor over a long window can take NVD 30+ seconds) naming …”
Publisher declares: read-only yes · open-world yes
5 inputs, 1 required
- vendorstringrequired“CPE vendor name, e.g.”
- productstring“Optional CPE product name, e.g.”
- daysstring“Look-back window in days, 1 to 120 (default 7)”
- topstring“How many top-scored CVEs to list, 1 to 50 (default 10)”
- matchstring“keyword (default: vendor/product words in the CVE text) or cpe (only CVEs NVD has mapped to the vendor CPE)”
security_jwt_token_inspector
“Decodes a JWT you supply (header and payload, base64url JSON) and reports its algorithm, key id, claims, and time checks (exp, nbf, iat).”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- tokenstringrequired“A JWT in compact form: header.payload.signature (required, max 8 KB)”
security_csp_evaluator_audit
“Reads the Content-Security-Policy header of a site's home page and lists weak points: 'unsafe-inline' and 'unsafe-eval' in script sources, bare wildcards, data: or http: script sources, a missing def…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as github.com (required)”
security_referrer_policy_audit
“Reads a site's Referrer-Policy header and its <meta name=referrer> tag from the home page, works out the policy a browser would apply, and rates how much of the URL it sends to other sites (strict, m…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as github.com (required)”
security_crossdomain_xml_test
“Reads a site's public crossdomain.xml (Adobe Flash) and clientaccesspolicy.xml (Silverlight) if they exist, lists the origins they allow, and flags wildcard grants ('*').”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Domain name such as www.adobe.com (required)”
search_website_content_crawler
“Reads one public web page and returns its title, description and main text as Markdown (headings, links, lists), plus link counts.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- urlstringrequired“Full http or https address of a public page”
- maxCharsstring“Longest Markdown returned, 500 to 40000 characters (default 8000)”
search_wayback_cdx
“Internet Archive Wayback Machine CDX index: archived snapshots of a URL or domain (timestamp, original URL, MIME type, HTTP status, length) with a link to each capture.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- urlstringrequired“URL or domain to look up, e.g.”
- limitstring“How many snapshots, 1 to 50 (default 10)”
search_google_search
“Organic web search results from the Brave Search API (an independent web index, not Google's): rank, title, URL, snippet, site name, page age and language for the first page of results.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- qstringrequired“Search query (1 to 200 characters)”
- limitstring“How many results, 1 to 20 (default 10)”
- countrystring“Optional 2-letter country for local results, e.g.”
- freshnessstring“Optional: pd (past day), pw (past week), pm (past month), py (past year)”
search_google_ads
“Google Ads Transparency Center: search advertisers by name or domain (verified name, advertiser ID, country, approximate ad count), or list the ads of an advertiser ID or website domain (creative ID,…”
Publisher declares: read-only yes · open-world yes
5 inputs
- qstring“Advertiser name or domain to search, e.g.”
- advertiserIdstring“Advertiser ID (AR + 20 digits) to list its ads”
- domainstring“Website domain to list ads pointing to it, e.g.”
- regionstring“Optional country code (US, GB, DE, TR...) or Google geo criteria ID for ads shown there”
- limitstring“Ads to return, 1 to 100 (default 40)”
search_wsj_articles
“WSJ World News headlines from the public Dow Jones RSS feed (latest items; keyword filter on title/summary).”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”
search_bing_search
“Bing web search results (Bing's public RSS search output, no key): result title, URL and snippet, in Bing's ranking order.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search query (1 to 200 characters)”
- limitstring“How many results, 1 to 30 (default 10)”
search_google_news
“Google News search (public Google News RSS search feed, no key, English/US edition): headline, publisher, publish time and the Google News link for the newest matching stories.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search query (1 to 200 characters)”
- limitstring“How many stories, 1 to 30 (default 10)”
search_pr_newswire
“PR Newswire latest news-release list from its public RSS feed (keyword filter on title/summary).”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”
search_beehiiv_newsletter
“Post archive of a beehiiv newsletter (by beehiiv subdomain, e.g.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- newsletterstringrequired“beehiiv subdomain (superhuman → superhuman.beehiiv.com) or the newsletter's domain/URL (e.g.”
- pagestring“Archive page, 1 or more (default 1), 10 posts per page”
- qstring“Words that must all appear in the title or subtitle (filters this page only; optional)”
search_benzinga
“Latest Benzinga financial news (the public JSON feed behind benzinga.com): headline, teaser, author, time, URL, tickers, channels and tags.”
Publisher declares: read-only yes · open-world yes
3 inputs
- tickersstring“Comma-separated stock tickers, up to 10 (optional), e.g.”
- qstring“Words that must all appear in the headline or teaser (optional, max 200 characters)”
- limitstring“How many stories, 1 to 100 (default 20)”
search_markdown_to_pdf_mcp
“npm registry search for MCP servers that convert Markdown to PDF (public npm search API, no key): package name, version, description, publisher, last publish date, monthly and weekly downloads, and n…”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Search words (1 to 100 characters, default markdown-to-pdf-mcp)”
- limitstring“How many packages, 1 to 20 (default 5)”
search_unpaywall
“Unpaywall open-access lookup by DOI (free API; it requires a contact e-mail set in UNPAYWALL_EMAIL, not a key): is the paper open access, OA status, best free full-text link, journal and publisher.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- doistringrequired“DOI such as 10.1038/nature12373”
search_reuters_articles
“Reuters latest articles from Reuters' public news sitemap (no key): headline, article URL and publication time, newest first.”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Optional words that must appear in the headline (up to 200 characters)”
- limitstring“How many articles, 1 to 50 (default 10)”
search_fifa_team_rankings
“FIFA men's national team world ranking (FIFA public ranking API, no key): position, team, country code, total points, previous points and previous rank for one ranking date.”
Publisher declares: read-only yes · open-world yes
2 inputs
- dateIdstring“Ranking date id such as id14870 (letters, digits and underscore, up to 40 characters; default id14870)”
- limitstring“How many teams from the top, 1 to 211 (default 20)”
search_university_rankings_mega_pack
“University rankings side by side from ShanghaiRanking ARWU (rank, national rank, total and six indicator scores) and Times Higher Education World University Rankings (rank, overall, teaching, researc…”
Publisher declares: read-only yes · open-world yes
5 inputs
- universitystring“Part of a university name, e.g.”
- countrystring“Country as the rankings write it, e.g.”
- arwuYearstring“ARWU edition, 2003 to 2026 (default 2026)”
- theYearstring“THE edition, e.g.”
- limitstring“Rows per ranking, 1 to 200 (default 20)”
search_freightwaves
“FreightWaves latest news from its public RSS feed (keyword filter on title/summary/categories).”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”
search_crossref
“Crossref works search (public REST API, no key): DOI, title, type, container (journal or book), year, authors and link for matching scholarly records.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words (1 to 200 characters)”
- rowsstring“How many records, 1 to 20 (default 5)”
search_bbc_news_articles
“BBC News top stories from the public BBC RSS feed (latest items; keyword filter on title/summary).”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”
search_article_extractor
“Extracts one article from a public news or blog page: headline (og:title or h1), author, published and modified times, description and the article body as Markdown.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- urlstringrequired“Full http or https address of an article page”
- maxCharsstring“Longest body returned, 500 to 40000 characters (default 8000)”
search_owgr_golf_rankings
“Official World Golf Ranking (OWGR public ranking API, no key): current men's position, player name, country, total points, average points and last week's position for the top players.”
Publisher declares: read-only yes · open-world yes
1 input
- limitstring“How many players from the top, 1 to 50 (default 10)”
search_techcrunch_articles
“TechCrunch latest articles from its public RSS feed (keyword filter on title/summary/tags).”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”
search_prnewswire_press_releases
“PR Newswire health-category press releases from its public RSS feed (keyword filter on title/summary).”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”
search_emedicine_articles
“Medscape eMedicine (Medscape Reference) clinical articles by specialty: title, topic category, article id and URL from the public specialty index, filtered by words in the title.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- specialtystringrequired“Specialty index, one of: allergy_immunology, cardiology, clinical_procedures, critical_care, dermatology, emergency_medicine, endocrinology, gastroenterology, …”
- qstring“Words that must all appear in the article title (optional, max 100 characters)”
- detailsstring“true = add summary, author and last-reviewed date for the first 5 results (default false)”
- limitstring“How many articles, 1 to 200 (default 25)”
search_openprescribing
“NHS England primary-care prescribing for a drug (official NHSBSA English Prescribing Dataset, monthly, ~2 months behind; the raw data behind OpenPrescribing.net): items, actual cost (GBP) and quantit…”
Publisher declares: read-only yes · open-world yes
5 inputs, 1 required
- drugstringrequired“Drug name contained in the BNF chemical substance or presentation name, e.g.”
- monthstring“Month as YYYYMM, e.g.”
- groupBystring“region, icb, practice or presentation (default icb)”
- areastring“Only rows whose ICB or region name contains this text, e.g.”
- limitstring“How many groups, 1 to 100 (default 20)”
search_ft_com_articles
“Financial Times headlines from the public FT RSS feeds: international homepage or any section/topic stream (world, markets, companies, technology, opinion, global-economy, us, uk, climate-capital...).”
Publisher declares: read-only yes · open-world yes
3 inputs
- sectionstring“FT section or topic slug from the ft.com address, e.g.”
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”
search_wechat_articles
“WeChat Official Account (公众号) articles matching a query, from Sogou WeChat search (weixin.sogou.com): title, summary, account name, publish time and link, 10 per page.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words, Chinese or English (1 to 80 characters)”
- pagestring“Result page 1 to 10 (default 1), 10 articles per page”
search_hacker_news
“Hacker News story search through the official HN Search API (Algolia, public, no key): title, article URL, author, points, comment count and discussion link.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words (1 to 200 characters)”
- limitstring“How many stories, 1 to 30 (default 10)”
search_drive_com_au_news
“Latest Drive.com.au (Australia) articles: headline, publisher, publish time and link, newest first, optionally matching search words, from the last 1-30 days.”
Publisher declares: read-only yes · open-world yes
3 inputs
- qstring“Words to search for within the site (optional, max 150 characters), e.g.”
- daysstring“Only articles from the last N days, 1 to 30 (default 7)”
- limitstring“How many articles, 1 to 100 (default 20)”
search_gtex_gene_expression
“GTEx Portal gene expression (public API v2, no key): median TPM of one gene in human tissues, sorted highest first, with the GENCODE id it was matched to.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- genestringrequired“Gene symbol such as BRCA1 (letters, digits and dash, up to 20 characters)”
- limitstring“How many tissues, 1 to 54 (default 10)”
search_cnbc
“CNBC top news from CNBC's public RSS feed (keyword filter on title/summary).”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”
search_dappradar_rankings
“Top 50 dapps from DappRadar's public rankings page: rank, name, token symbol, chains, market cap, token price, price change, trading volume, unique active wallets (UAW) and TVL, for 24h/7d/30d, optio…”
Publisher declares: read-only yes · open-world yes
3 inputs
- chainstring“DappRadar chain slug, e.g.”
- periodstring“24h, 7d or 30d (default 24h)”
- limitstring“How many dapps, 1 to 50 (default 25)”
search_german_impressum
“Reads the Impressum (legal notice required on German websites, §5 TMG/DDG) at the page URL you give: e-mail addresses, phone numbers, postal address lines and the notice text as Markdown.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- urlstringrequired“Full http or https address of the Impressum page of a German website”
search_datacite_metadata
“DataCite DOI search (public REST API, no key): DOI, title, publication year, resource type, publisher, creators and landing page for datasets, software and other research outputs.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search words (1 to 200 characters)”
- limitstring“How many records, 1 to 25 (default 5)”
search_al_jazeera_articles
“Al Jazeera latest articles from its public RSS feed (keyword filter on title/summary/categories).”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”
search_defector_articles
“Defector articles from its public RSS feed (keyword filter on title/summary/tags).”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Words that must all appear in the title or summary (optional, max 200 characters)”
- limitstring“How many items, 1 to 30 (default 10)”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 129 tools are listed. Read 2026-10-24.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

No AI reading was available for this server's tools (the two runs did not agree, or the listing was not reviewed).

Counted from the listing

Parameters with a description: 100% of 230
Tools with a description: 100% of 129
Typical description length: 382 characters

The tool set

Counted from the listing

Tools: 129
Size of the list: about 31,825 tokens for an agent to load (characters ÷ 4)
Naming: 129 of 129 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 0 of 129 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-10-24 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai

Settings → Connectors → Add custom connector, then paste:
https://api.webintel-api.workers.dev/mcp

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "sitecheck-web-intel": {
      "url": "https://api.webintel-api.workers.dev/mcp"
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "sitecheck-web-intel": {
      "type": "http",
      "url": "https://api.webintel-api.workers.dev/mcp"
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"sitecheck-web-intel","type":"http","url":"https://api.webintel-api.workers.dev/mcp"}'

Claude Code

claude mcp add --transport http sitecheck-web-intel https://api.webintel-api.workers.dev/mcp

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://api.webintel-api.workers.dev/mcp --transport http

The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Remote endpoint api.webintel-api.workers.dev/mcp	Session opened	matches	our test · 2026-10-24
No credential declared as required	Opened a session without any credential	matches	our test · 2026-10-24

Choosing

Record checks

Public records · not a safety rating

1 of 2 record checks met · 7 do not apply

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
Not metSource repository link opensThe registry entry gives no repository link.
Does not applyRepository is not archivedNo public GitHub repository to read.
Does not applyCode pushed to the repository in the 90 days before our checkNo public GitHub repository to read.
Does not applyRepository publishes a security policy (SECURITY.md)No public GitHub repository to read.
Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-24. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.bck-stack/sitecheck-web-intel

Answered from the data above

Does io.github.bck-stack/sitecheck-web-intel need an API key or sign-in?

It opened a session without any credential on 2026-10-24. The registry entry declares no required credential; no declaration is not a guarantee.

Has io.github.bck-stack/sitecheck-web-intel been security tested?

Partly. 2 of the 14 checks that apply to it were exercised. We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security verdict is published before verification.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (we call no server's tools)

We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-24

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: not run · nothing to check it against
Fake assistant turns: not applicable
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not run · our policy
Consent handling: not testable from outside
Sign-in metadata: not applicable

2 exercised12 not run (reason given)4 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 14 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 2

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised

Not run, with the reason · 12

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside

Does not apply to this server · 4

13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.No sign-in (OAuth) metadata is published, so there are no sign-in addresses to check.not applicable

Source: our own test, 2026-10-24, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted a read-only session with the server's remote endpoint
387 msConnected after 0 redirects. No credential was sent or needed.
Read the inventory: 129 tools, 0 resources, 0 prompts.
1,185 msFinished: 2 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

pending: added in the weekly update

listed 2026-10-24; not classified yet

Pricing modelAI-classified

pending: added in the weekly update

the website is not read yet

Programming language

does not apply

no existing GitHub repository (server declares no repository link, so there is nothing to fetch)

Hosting type

remote (hosted by the publisher)

registry · 2026-10-24

MCP capability

tools

our test · 2026-10-24

Transport

streamable HTTP

registry · 2026-10-24

Required credentials

none declared

registry · no declaration is not a guarantee

Package registry

does not apply

remote-only server: no package is shipped, so there is no package registry

Freshness

0–30 days

registry updatedAt · 2026-10-24

Lifecycle status

active

registry · 2026-10-24

License class

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Integrity hash

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Signature / provenance

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Dependency advisories

does not apply

ships no package, so there are no dependencies to audit

Popularity

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Publisher signals

not stated

no readable GitHub owner to describe

Maintenance

does not apply

server declares no repository link, so there is nothing to fetch

Environment

the publisher's infrastructure

where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.bck-stack/sitecheck-web-intel: MCP server record.” Data checked 2026-10-24. https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-web-intel

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.bck-stack/sitecheck-web-intel)](https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-web-intel)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology