Untapped Site Audit

io.github.CTF-MaxPublished by GitHub account CTF-Maxv0.2.0Updated Oct 27, 2026

Audit a site in the order that finds the bottleneck

The publisher's own server: audit.domains - Domain Valuation

VerifiedSTDIODesktop onlyWeb Search & ScrapingDeveloper Tools

Overview

AI-generated overview

Runs a read-only SEO site audit for an assistant: per-page search-engine facts and site-wide sitemap problems, in a bottleneck-first order.

What you can do
  • Inspect a single page as a search engine sees it: status, redirects, title, meta description, robots directives, canonical, headings, schema, hreflang, word count, links and images without alt
  • Audit every URL in a sitemap (or a supplied list) and report site-wide issues such as duplicate titles, H1s and descriptions, plus noindex, redirected or non-200 pages in the sitemap
  • Follow a guided 8-step audit skill (indexed, seen, buyer phrases, on-page targeting, visitors, engaged, buyers), using other Untapped plugins when installed and marking unmeasurable items UNKNOWN
When to use it
Useful when you want an assistant to check on-page SEO and sitemap hygiene for a site you own or are allowed to crawl, or to work through a structured audit of where a site loses visitors before buyers.
Requirements
Runs locally as a stdio process and needs Python 3.10+ available on PATH as python; standard library only, no pip installs. No accounts, keys or headers. To audit a local preview or private address, set UNTAPPED_AUDIT_ALLOW_PRIVATE=1. Network access to the audited site.
Before you install
The tools fetch the target site's pages, sitemap and robots.txt one at a time; nothing else is sent and there is no telemetry. Private addresses are refused unless UNTAPPED_AUDIT_ALLOW_PRIVATE=1 is set, which widens what it can reach. Read-only, but only audit sites you are permitted to crawl; JavaScript-rendered pages may look empty, and audits default to 25 pages (max 200).

Installation

In SourceWeft

  1. Open Untapped Site Audit in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Untapped Site Audit

A website audit your agent runs in the order that finds the real bottleneck (indexed → seen → buyer phrases → on-page targeting → visitors → engaged → buyers), plus free on-page checks across a whole sitemap. Built by Find Untapped Growth.

What's inside

  • Skill site-audit: the 8-step audit. It uses Untapped Index Watch (step 1), Untapped Search Console (step 2) and Untapped SERP (step 3) when they're installed, and labels anything it can't measure UNKNOWN instead of guessing.
  • page_facts: one page as a search engine reads it: status, redirect chain, title, meta description, meta robots + X-Robots-Tag + robots.txt (Googlebot), canonical, H1/H2s, schema types, hreflang, word count, links, images without alt, and the problems found.
  • audit_pages: page_facts for every sitemap URL (or a list), plus site-wide problems: duplicate titles, H1s and descriptions; noindex, redirected or non-200 pages listed in the sitemap.

Both tools are free and read-only; they fetch pages one at a time like a polite crawler.

Install

  • Claude Code: /plugin install untapped-site-audit --marketplace CTF-Max/untapped-plugins (or, from a terminal: claude plugin marketplace add CTF-Max/untapped-plugins, then claude plugin install untapped-site-audit@untapped-plugins).
  • Codex: codex plugin marketplace add CTF-Max/untapped-plugins, then codex plugin add untapped-site-audit@untapped-plugins.
  • Needs Python 3.10+ on PATH as python. Standard library only: nothing to pip install.

Setup

Nothing else to set up. To audit a local preview (localhost, 192.168.x.x), set UNTAPPED_AUDIT_ALLOW_PRIVATE=1; private addresses are refused otherwise.

What it connects to

Only the website you ask it to audit: its pages, its sitemap and its robots.txt, fetched one at a time. Nothing is sent anywhere else; no telemetry. Details: PRIVACY.md.

Limits

  • Reads the HTML as served. A page built by JavaScript after loading can look empty here.
  • Title 30–60 and description 70–160 characters are guidelines, not rules: Google rewrites snippets anyway.
  • Default 25 pages per audit (up to 200).

Development

python -m unittest discover -s untapped-site-audit/tests   # offline, 7 tests

Source: untapped-site-audit/README.md at commit c5eb3c7

Tools

0
SourceWeft started this package once in an isolated sandbox, without credentials, to list its tools. That failed: the package type cannot run in the sandbox.

Version history

1
  1. v0.2.0LatestOct 22, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Audit integrations

audit.domains - Domain Valuation

domains.auditOfficial publisher

Deterministic domain-name valuation: fair-value intervals, comparable recorded sales, availability checks, and a verified for-sale listing market.

Streamable HTTPWeb executable
Business & Commerce27 toolsNov 1, 2026

Revenue Agent — OpenAPI Audit & Change Detection

news.prhOfficial publisher

A remote MCP endpoint that audits OpenAPI specifications and detects API changes, charging $0.10 USDC per analysis via x402 on Base.

Streamable HTTPWeb executable
Developer Tools2 toolsOct 24, 2026

Zovo Dependency Audit

Published by GitHub account theluckystrike

Zovo Dependency Audit's hosted MCP server; no sign-in required; Streamable HTTP; 2 tools.

Streamable HTTPWeb executable
2 toolsNov 8, 2026

SEO Audit & Broken Link Checker

Published by GitHub account prometheus-maker

An Apify-hosted MCP server that audits a website's pages for SEO metadata and finds broken links and images, returning per-page scores.

Streamable HTTPWeb executableAuth
Data & AnalyticsCredential requiredNov 7, 2026

FinePrint AI Legal Risk & Contract Audit MCP Server

Published by GitHub account RitualDev-Lab

Local in-memory scanner that grades legal contracts, NDAs and leases for risk and drafts redline amendments for coding agents.

STDIODesktop only
AI & MLNot validated yetNov 7, 2026