SiteHealth MCP

io.github.carsonroell-debugPublished by GitHub account carsonroell-debugv0.1.1Updated Oct 24, 2026

Full website health audit — SSL, DNS, DMARC/SPF/DKIM, performance, uptime, links

VerifiedSTDIODesktop onlyWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Runs website health audits from an AI assistant: SSL, DNS, email authentication, performance, uptime and broken links, with a scored report.

What you can do
  • Run a full audit of a site and get a weighted 0-100 score, letter grade, critical issues and recommendations
  • Check SSL certificates for validity, expiry, issuer, protocol and SANs
  • Inspect DNS records (A, AAAA, MX, NS, CNAME, TXT, SOA) and resolution time
  • Validate DMARC, SPF and DKIM email authentication with fix suggestions
  • Measure page performance (TTFB, load time, page weight, compression, caching) and HTTP uptime
  • Extract page links and flag those returning 4xx/5xx responses
When to use it
Useful when you want an assistant to quickly diagnose why a site is slow, unreachable, has expiring certificates, or has email deliverability problems, and to get a single scored summary instead of running separate checks by hand.
Requirements
Runs locally over stdio, typically via npx sitehealth-mcp, so Node.js is needed. No API keys or environment variables are declared. Network access to the audited site and its DNS records is required. The README states that the full audit and most checks require a paid Pro subscription ($19/mo or $190/yr); the free tier covers only SSL and DNS checks.
Before you install
The README lists a paid Pro tier ($19/mo or $190/yr) needed for the full audit, email auth, performance, uptime and link checks, so expect a purchase to unlock most tools. Audits make outbound requests to the target site and its DNS, which reveals the domains you check to those third parties. Link checking crawls pages on the target site.

Installation

In SourceWeft

  1. Open SiteHealth MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

SiteHealth MCP

[npm] [License: MIT] [MCPize]

Full website health audit in one MCP tool call. Zero API keys required.

One call. Six checks. Scored report.

One-click install: Install on MCPize | npx sitehealth-mcp

Features

  • SSL Certificate — validity, expiry, issuer, protocol, SANs
  • DNS Health — A/AAAA/MX/NS/CNAME/TXT/SOA, IPv6, resolution time
  • Email Auth — DMARC, SPF, DKIM validation with fix recommendations
  • Page Performance — TTFB, load time, page weight, compression, caching
  • Uptime — HTTP ping with response time
  • Broken Links — extract and check page links for 4xx/5xx responses
  • Health Score — weighted 0-100 score with letter grade (A-F)

Quick Start

json
{  "mcpServers": {    "sitehealth": {      "command": "npx",      "args": ["-y", "sitehealth-mcp"]    }  }}

Then ask your AI agent:

"Audit the health of example.com"

Tools

ToolDescription
audit_siteFull audit — all 6 checks, scored report
check_sslSSL cert validity and expiry
check_dnsDNS records and resolution
check_email_authDMARC/SPF/DKIM validation
check_performanceTTFB, load time, page weight
check_uptimeHTTP ping + response time
check_linksBroken link detection

Free vs Pro

ToolFreePro ($19/mo)
check_sslYesYes
check_dnsYesYes
audit_site-Yes
check_email_auth-Yes
check_performance-Yes
check_uptime-Yes
check_links-Yes

Free tier gives you SSL and DNS checks. Pro unlocks the full 6-check audit with A-F scoring, email authentication, performance, uptime, and broken link detection.

Upgrade to Pro on MCPize — $19/mo or $190/yr.

Example Output

json
{  "url": "https://example.com",  "overallScore": 82,  "overallGrade": "B",  "criticalIssues": [    "No DMARC record — required by Gmail/Yahoo/Microsoft for deliverability"  ],  "warnings": [    "SSL certificate expires in 28 days — renew soon",    "2 broken links found out of 47 checked"  ],  "recommendations": [    "Add a DMARC record: v=DMARC1; p=quarantine; rua=mailto:[email protected]",    "Enable gzip/brotli compression to reduce transfer size"  ]}

How It Works

All checks use Node.js builtins (tls, dns/promises, fetch) — no external API keys, no costs, no rate limits.

audit_site("example.com")  ├── SSL check     (tls socket)      → cert validity, expiry  ├── DNS check     (dns/promises)    → record resolution  ├── Email auth    (DNS TXT lookups) → DMARC, SPF, DKIM  ├── Performance   (timed fetch)     → TTFB, page weight  ├── Uptime        (HEAD request)    → reachability  └── Broken links  (page crawl)     → link validation        ↓  Weighted score (0-100) + grade (A-F) + recommendations

Scoring Weights

CheckWeight
SSL20%
Performance20%
Uptime20%
Email Auth15%
Links15%
DNS10%

Install

MCPize (Recommended)

One-click install with managed hosting: Install on MCPize

npm

bash
npx sitehealth-mcp

License

MIT — Built by Freedom Engineers

Related

Source: README.md at commit dc1d88c

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.1LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.