RealMarket Site Check

com.realmarketlabs.toolsPublished by tools.realmarketlabs.comOfficial publisherv2Updated Nov 4, 2026

Passive checks of a public website: email authentication (SPF, DKIM, DMARC) and basic security.

The publisher's own server: RealMarket E-Signature Cost

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that runs passive, read-only checks on a public website: email authentication, basic security, AI-built app exposures and Shopify store…

What you can do
  • Check a domain's email deliverability and site security: SPF, DKIM and DMARC records, mail servers, HTTPS, security headers, WordPress exposure and Lovable/Supabase setup
  • Inspect a web app built with AI tools for exposed API keys, public source maps, missing security headers, stale deploys, missing error monitoring and browser-side AI model calls
  • Review a Shopify store's public pages for social login, wishlist, sold-out product counts and multi-country storefronts
  • Return findings as reports, which the assistant can summarize in the user's language
When to use it
Useful when you want a quick, non-intrusive read on a public site before contacting its owner, auditing your own domain's email setup, or reviewing an AI-generated app or Shopify store for common misconfigurations.
Requirements
Remote streamable HTTP endpoint at tools.realmarketlabs.com; no packages, environment variables, headers or authentication are declared. The target site must be publicly reachable, since only public DNS records and public pages are read.
Before you install
Reports come back in Portuguese or Spanish, so the assistant must translate them. The server treats tool results and user-supplied fields as untrusted data and warns against following embedded requests, but findings about exposed keys or misconfigurations should still be verified before acting on them.

Installation

In SourceWeft

  1. Open RealMarket Site Check in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.realmarketlabs.tools%2Fsite-check/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "realmarket-site-check": {
      "type": "http",
      "url": "https://tools.realmarketlabs.com/mcp/site-check"
    }
  }
}

Tools

3

check_site_email_security

Check email authentication and site security

Checks whether a domain's email is likely to reach the inbox (SPF, DKIM and DMARC records, mail servers) and whether the website has basic security in place (HTTPS, security headers, WordPress exposure, Lovable/Supabase setup). Reads only public DNS records and the public home page. The report is written in Portuguese.

Parametersurlrequired

check_ai_built_app

Check an app built with AI tools

Reads the public pages and public JavaScript of a web app (typically built with Lovable, Bolt, v0, Replit or similar) and reports exposed API keys, public source maps, missing security headers, stale deploys, missing error monitoring and AI model calls made from the browser. Passive check: it never logs in, submits forms or probes private routes.

Parametersurlrequiredlanguagesends_user_data_to_ai

diagnose_shopify_store

Diagnose a Shopify store

Reads the public pages of a Shopify store and reports whether it offers social login and a wishlist, how many products show as sold out, and whether it runs storefronts for several countries. Reads only public pages.

Parametersurlrequiredlanguage

Version history

1
  1. v2LatestNov 4, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Realmarketlabs integrations

RealMarket E-Signature Cost

com.realmarketlabs.toolsOfficial publisher

Compares a Brazilian company's e-signature costs per document and per year in BRL against public prices of other providers.

Streamable HTTPWeb executable
Finance1 toolNov 4, 2026

RealMarket Survey Builder

com.realmarketlabs.toolsOfficial publisher

RealMarket Survey Builder's hosted MCP server, published by tools.realmarketlabs.com; no sign-in required; Streamable HTTP; 1 tool.

Streamable HTTPWeb executable
1 toolNov 4, 2026

RealMarket Review Time

com.realmarketlabs.toolsOfficial publisher

Estimates the hours and yearly cost of screening and full-text reading in systematic, scoping or narrative literature reviews.

Streamable HTTPWeb executable
Productivity & Workflow1 toolNov 4, 2026

RealMarket LATAM Fit

com.realmarketlabs.toolsOfficial publisher

Remote MCP server that compares Latin American market readiness and calculates market-entry test economics for business planning.

Streamable HTTPWeb executable
Data & Analytics2 toolsNov 4, 2026