57trust / 100

SimplyScan

by simplyscan.io in Security & trust

MCP serverFailing, checked 6 h ago

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

https://api.simplyscan.io/mcp

This listing's own text contains instructions aimed at AI agents (see the security scan below). We withhold that text from agents and never recommend this service.

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
83.3%
Response time
1.4 s typical, 1.4 s slowest 5%
Last check
6 h ago: Connection failed (UND_ERR_CONNECT_TIMEOUT)
Next check
in 54 min

How to call it

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "simplyscan": {
      "type": "http",
      "url": "https://api.simplyscan.io/mcp"
    }
  }
}

7 tools

  • scan_website

    Run a free SimplyScan security & speed scan of a deployed web app URL. Returns a 0-100 score and findings (exposed secrets, missing Supabase RLS, frontend leaks, speed issues). Best for apps built with Lovable, Bolt, v0, Cursor, Replit, etc.

  • check_security_headers

    Grade a URL's HTTP security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, COEP) A-F.

  • check_ai_visibility

    AEO check: whether AI answer engines (ChatGPT/GPTBot, Claude, Perplexity, Google-Extended, etc.) can crawl and cite the site, plus llms.txt and structured-data signals.

  • check_seo

    On-page SEO audit of a URL: title, meta description, H1, canonical, indexability, Open Graph, structured data, image alt coverage, sitemap. Returns an A-F grade.

  • check_ssl

    Inspect a domain's SSL/TLS certificate: issuer, expiry, protocol, and flags for expiring/self-signed/mismatched certs.

  • check_email_security

    Check a domain's email authentication: SPF, DKIM (common selectors), and DMARC policy. Flags spoofable domains.

  • check_exposed_files

    Probe a site for accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.

Security scan

  • Mentions credentials or secret files in tool:check_exposed_files
    r accidentally exposed high-risk files (.env, .git/config, backups, etc.). Reports HTTP status only, never file contents.

Recent checks

WhenResultHTTPTime
6 h agoConnection failed (UND_ERR_CONNECT_TIMEOUT)--
15 h agoPassed2001.4 s
24 h agoPassed2001.4 s
33 h agoPassed2002.9 s
42 h agoPassed2001.3 s
2 days agoPassed2001.3 s