Mcp Cookie Consent Audit

com.mambabuilt由 mambabuilt.com 发布v1.0.2更新于 Nov 7, 2026

Audit a site's cookie consent from the EU: trackers before consent, reject, after reject, GPC.

发布方自己的服务:audit.domains - Domain Valuation

概览

AI 生成的概览

通过 Apify actor 从欧盟地址审计网站 Cookie 同意行为,报告同意前、拒绝后及 GPC 下的追踪情况。

可以做什么
  • 从欧盟地址审计一个或多个域名的 Cookie 同意行为,单次运行最多 500 个域名,并可选择欧盟代理国家。
  • 每个域名返回一行结果:识别到的同意管理平台、接受与拒绝控件是否位于横幅第一层、同意前与拒绝后的追踪 Cookie 和追踪主机请求、Google Consent Mode 的 denied ping,以及 Global Privacy Control 对比。
  • 对比未点击、点击拒绝后与启用 GPC 三种会话,并给出信号列表和所用追踪器清单版本。
适用场景
适合隐私、合规或营销审查场景,用于检查客户或竞品网站是否在同意前设置追踪器、是否在第一层提供拒绝按钮、是否响应 Global Privacy Control。也适合从指定欧盟国家批量检查多个站点。
运行要求
以 npm 包形式通过 stdio 在本地运行,需要 Node.js 18 或更高版本。需要 Apify 账户,并通过环境变量 APIFY_TOKEN 提供 Apify API 令牌;无令牌时仅能列出工具。全部工作在 Apify 上执行,需要网络访问。
安装前请注意
每个被审计域名都会消耗 Apify 额度并计入你的 Apify 账户(按域名和按运行启动计费),费用随域名数量增加;可用可选的 max_charge_usd 输入限制单次运行花费。APIFY_TOKEN 属于机密,应避免写入共享配置。结果是供审查的信号而非法律结论;除非设置 skip_cache,否则会复用缓存结果。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Mcp Cookie Consent Audit,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Cookie Consent Audit MCP Server

[Glama score] [MCP Registry] [npm version] [npm downloads] [license] [mcpservers.org]

[Cookie Consent Audit MCP server]

An MCP server for the Mamba Labs GDPR Cookie Banner and Consent Checker actor on Apify. Send a domain or a list of domains. Each one is loaded from an EU address in fresh browser sessions, and you get back one row of consent signals per domain: the consent platform, reject on the first layer, trackers and tracking cookies before consent and after a reject, and the Global Privacy Control response.

What's Inside

What it does

Audit one or more websites for cookie consent behavior from an EU address. Each domain is loaded in fresh browser sessions: once before any consent click, once after clicking the reject control on the first layer of the banner, and once with Global Privacy Control on. Returns one row per domain: the consent management platform found (TCF __tcfapi, OneTrust, Cookiebot, Usercentrics, Didomi, and others), whether accept and reject controls sit on the first layer, tracking cookies and requests to known tracker hosts before consent and after the reject, Google Consent Mode denied pings, the GPC comparison and /.well-known/gpc.json, a list of signals, and the version of the fixed tracker list used. Signals for review, not legal findings. Cookie values are never returned. A run that does not succeed is returned as an error with its run ID. Read-only on the audited sites; requires an APIFY_TOKEN and consumes Apify credits per audited domain.

All of the work runs on Apify. This package is a thin client that starts the actor run, waits for it, and hands back the dataset rows.

Quick start

You need Node.js 18 or newer and an Apify account with an API token.

Add this to your Claude Desktop config (claude_desktop_config.json), Cursor, or any MCP client:

json
{  "mcpServers": {    "mamba-cookie-consent-audit": {      "command": "npx",      "args": [        "-y",        "@mambalabsdev/mcp-cookie-consent-audit"      ],      "env": {        "APIFY_TOKEN": "your-apify-token"      }    }  }}

Restart the client. The audit_cookie_consent tool appears.

Prerequisites

Example prompts

  • "Audit example.de for cookie consent from Germany and tell me what fires before consent."
  • "Check these five client sites from France: is there a reject button on the first layer, and does anything still track after a reject?"

Tool

audit_cookie_consent. One tool. Example arguments:

json
{  "domains": ["example.de", "example.fr"],  "proxy_country": "DE"}

Inputs

Every buyer facing input of the actor, unchanged. Omitted inputs take the actor's own defaults.

InputTypeRequiredDescription
domainstringnoThe website to audit, for example example.de or https://www.example.de/. The homepage is audited. Give domain or domains.
domainsarraynoMore domains or URLs to audit in the same run. Duplicates are skipped. Up to 500 per run.
proxy_countrystringnoThe EU country the browser connects from: DE, FR, NL, IE, IT, ES, SE, PL, AT, BE, DK, FI, or none. Default DE. none is not an EU vantage point.
check_gpcstringnoAlso run the Global Privacy Control session and read /.well-known/gpc.json. Default true.
max_charge_usdstringnoOptional. Stop the run before the audit charges would pass this amount.
skip_cachestringnoA domain audited in the last 24 hours with the same settings comes back from cache at no charge. true audits it again. Default false.

Pricing

Pay per event on Apify, billed to your Apify account. Prices in USD.

EventFree planBronzeSilverGold
domain-audited, per fully audited domain$0.05$0.0475$0.045$0.0425
apify-actor-start, per run start$0.001$0.001$0.001$0.001

Blocked, timed out, partial, cached, and invalid rows are never charged.

Your keys

The actor needs no provider key. It loads public pages with the page and its banner deciding requests sent through the Apify proxy, and holds no key of its own.

Full actor documentation

apify.com/mambalabs/cookie-consent-audit

License

MIT. See LICENSE.

来源:README.md,提交 e936a45

工具

1

版本历史

2
  1. v1.0.2最新Nov 5, 2026
  2. v1.0.1Oct 19, 2026

评分

已满足适用检查项的 90%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分
  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

其他 Audit 集成