Sitelemetry

com.sitelemetryPublished by sitelemetry.comOfficial publisherv0.4.3Updated Oct 25, 2026

OAuth website audits: security, SEO, AI visibility, integrations, accessibility and performance.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Hosted remote MCP server that lets an assistant run authorized website audits for security, SEO, AI visibility, integrations, accessibility and performance.

What you can do
Run security audits covering DNS, email authentication records, TLS and HTTP security headers, plus active checks on verified hosts when the plan allows it. Crawl a site for technical SEO: indexation, meta tags, canonicals, structured data, broken links and redirect chains. Assess AI visibility, including entity clarity, answerability, llms.txt and AI-crawler policy. Detect analytics, tag manager, pixel, verification and consent setups. Check static HTML against WCAG 2.2-oriented accessibility criteria and measure Core Web Vitals through Google PageSpeed Insights. Run a combined full audit across the areas the account includes, with prioritized findings, severity, evidence and recommendedfix
When to use it
Use it when you own or are authorized to assess a website and want prioritized, plain-language audit findings inside your assistant, from a quick free security check to a paid full six-area audit.
Requirements
A remote Streamable HTTP endpoint with OAuth 2.1 with PKCE browser sign-in; no API key in the client configuration. A Sitelemetry account is required, and the audits and usage limits follow the account's plan. The client must support remote HTTP MCP servers and browser-based OAuth.
Before you install
Only audit sites you own or are explicitly authorized to assess. On verified hosts, active checks such as port and injection probes can appear in the site's logs or alerts. Protected modules and full audits need ownership verification. SEO, AI visibility, accessibility and integrations audits read static HTML only, so JavaScript-rendered content is not checked. Results are point-in-time evidence, not proof a site is vulnerability-free. Paid plans are needed for most audit types.

Installation

In SourceWeft

  1. Open Sitelemetry in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.sitelemetry%2Fsitelemetry/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "sitelemetry": {
      "type": "http",
      "url": "https://sitelemetry.com/mcp"
    }
  }
}

README

Sitelemetry MCP server

[Sitelemetry]

Sitelemetry is a hosted, remote MCP server for authorized website audits. Connect it to your AI assistant and ask for a security, technical SEO, AI visibility, analytics and tracking integrations, accessibility or performance audit in plain language. Each tool returns prioritized findings with severity, evidence, impact and a recommended fix.

This repository contains documentation only. Sitelemetry runs as a hosted service at https://sitelemetry.com/mcp; the server source code is not published here.

Endpointhttps://sitelemetry.com/mcp
TransportStreamable HTTP (remote only)
AuthorizationOAuth 2.1 with PKCE (browser sign-in, no API key in the client configuration)
Tools7 audit tools (your client lists the ones the connected account's plan includes)
Report languagesEnglish, Turkish, Spanish, German, French, Portuguese, Italian, Japanese, Chinese
Registry namecom.sitelemetry/sitelemetry
Full setup guidehttps://sitelemetry.com/mcp-guide

Requirements

  • A Sitelemetry account. New users can create one from the sign-in step of the connection flow.
  • The audits and usage limits available to a connection follow the plan of the connected account. The Free plan covers security audits only, with a limited set of security checks and a monthly allowance. SEO, AI visibility, integrations, accessibility and performance audits, and a six-area full audit, need a paid plan.
  • Use Sitelemetry only for websites and infrastructure you own or are explicitly authorized to assess.

Configuration

VS Code (GitHub Copilot)

Add the server to .vscode/mcp.json in your workspace, or to your user MCP configuration:

json
{  "servers": {    "sitelemetry": {      "type": "http",      "url": "https://sitelemetry.com/mcp"    }  }}

Start the server from the CodeLens above the entry, from the MCP SERVERS section of the Extensions view, or with the MCP: List Servers command. When VS Code asks you to authenticate, complete the Sitelemetry sign-in in your browser (sign in or create an account), then approve access.

Codex

bash
codex mcp add sitelemetry --url https://sitelemetry.com/mcpcodex mcp login sitelemetry

Claude Code

bash
claude mcp add --transport http sitelemetry https://sitelemetry.com/mcp

Then open /mcp in Claude Code and choose Authenticate for Sitelemetry.

Cursor

Add this entry to .cursor/mcp.json in your project, or to ~/.cursor/mcp.json for all projects:

json
{  "mcpServers": {    "sitelemetry": {      "url": "https://sitelemetry.com/mcp"    }  }}

Other MCP clients

Add a remote MCP server named sitelemetry with the URL https://sitelemetry.com/mcp. Select Streamable HTTP and OAuth if your client asks. The client needs to support remote HTTP MCP servers and browser-based OAuth.

ChatGPT and Claude.ai users can connect through the Sitelemetry listing in those apps. See the setup guide for details.

Long audits

Long hosted audits return a job instead of a final result. The client checks that same job until the result is ready, without starting a second scan. If your client has a per-call timeout setting, allowing up to 15 minutes avoids cutting off long audits.

Tools

ToolWhat it does
audit_securitySecurity posture of a website: public checks such as DNS, e-mail authentication records, TLS and HTTP security headers on any target; on a verified host, the protected and active checks your plan includes.
audit_seoTechnical SEO crawl: crawlability, indexation, titles and meta tags, headings, canonical tags, structured data, broken internal links, redirect chains and AI-crawler policy.
audit_ai_visibilityHow ready a site's content is to be found and cited by AI search and LLM assistants: entity clarity, answerability, source signals, llms.txt and AI-crawler policy.
audit_integrationsAnalytics, tag manager, marketing pixel, site verification and consent setup detected from the site's HTML and headers.
audit_accessibilityWCAG 2.2-oriented checks of the static HTML: image alternatives, form labels, heading structure, landmarks, contrast signals, language attribute and more.
audit_performancePerformance and Core Web Vitals through Google PageSpeed Insights: LCP, INP, CLS, FCP, TTFB and the top improvement opportunities.
audit_fullEvery audit area the connected account includes, in one call, with a combined score across the measured areas.

Every tool takes an explicit target URL and a report language. The dotted names (audit.security, audit.full, …) are accepted as aliases.

Usage

Once connected, ask your assistant in plain language, for example:

Safety and scope

  • Sitelemetry is not a penetration test. On an unverified target, hosted security audits run public, non-intrusive checks only. On a host you have verified, the default can also run the active checks your plan includes, such as port and injection probes.
  • Checks send read-style requests and benign probes that are not meant to change the audited website, but active checks can appear in the site's logs or alerts. Private-network and cloud-metadata targets are blocked.
  • Protected security modules and a full six-area audit need the site to be verified in your Sitelemetry workspace (DNS TXT record, HTTP file or Google Search Console). Through the Claude.ai listing, every audit except the public security checks needs current ownership verification for the exact HTTPS target.
  • SEO, AI visibility, accessibility and integrations audits read static HTML. Pages are not rendered in a browser, so content added only by JavaScript is not checked.
  • Audit results are point-in-time evidence. They do not establish that a site is free of vulnerabilities.
  • OAuth clients receive a short-lived, audience-bound access token, not your Sitelemetry password.
  • You can revoke a client's access at any time in My account > Connected MCP applications.

Links

Sitelemetry is operated by Egenil Teleferik Mühendislik Teknik İşletme Danışmanlık Limited Şirketi.

Source: README.md at commit 79cb2eb

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

2
  1. v0.4.3LatestOct 6, 2026
  2. v0.4.2Sep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.