SimplyScan
by simplyscan.io in Security & trust
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
https://api.simplyscan.io/mcp
This listing's own text contains instructions aimed at AI agents (see the security scan below). We withhold that text from agents and never recommend this service.
Last 30 days
- Uptime
- 83.3%
- Response time
- 1.4 s typical, 1.4 s slowest 5%
- Last check
- 6 h ago: Connection failed (UND_ERR_CONNECT_TIMEOUT)
- Next check
- in 54 min
How to call it
Add it to any MCP client that supports remote servers.
{
"mcpServers": {
"simplyscan": {
"type": "http",
"url": "https://api.simplyscan.io/mcp"
}
}
}7 tools
- scan_website
Run a free SimplyScan security & speed scan of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0, Cursor, Replit, etc.
- check_security_headers
Grade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.
- check_ai_visibility
AEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals.
- check_seo
On-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade.
- check_ssl
Inspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.
- check_email_security
Check a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.
- check_exposed_files
Probe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.
Security scan
- Mentions credentials or secret files in tool:check_exposed_files
r accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.
Recent checks
| When | Result | HTTP | Time |
|---|---|---|---|
| 6 h ago | Connection failed (UND_ERR_CONNECT_TIMEOUT) | - | - |
| 15 h ago | Passed | 200 | 1.4 s |
| 24 h ago | Passed | 200 | 1.4 s |
| 33 h ago | Passed | 200 | 2.9 s |
| 42 h ago | Passed | 200 | 1.3 s |
| 2 days ago | Passed | 200 | 1.3 s |