Relvato

com.relvato由 relvato.com 发布官方发布者v3.5.1更新于 Oct 31, 2026

Website monitoring: uptime, checkout, SEO (Search Console, Bing), security, speed, DNS, compliance.

已验证Streamable HTTP可网页运行开发者工具安全与监控数据与分析

概览

AI 生成的概览

托管式网站监控:助手可添加站点、配置与调整监控项、运行扫描、读取结果并给出修复建议。

可以做什么
  • 添加站点、验证所有权、按目标挑选监控项并添加或忽略推荐
  • 读取健康结论、通过率趋势、Core Web Vitals、运行记录、修复简报、WordPress 更新、活动日志、通知、告警与状态页设置
  • 调整监控项:运行计划、视觉监控页面与遮罩、单项设置、站点与告警时间、定时任务心跳
  • 立即运行扫描、取消排队运行、请求 AI 修复、应用建议的 WordPress 修复、启动安全插件更新与隔离模式
  • 复核结果:接受或忽略视觉与结构变化、忽略发现项,均可撤销
适用场景
适合让助手端到端看护一个线上网站:搭建可用性、结账、安全、SEO 与速度监控,部署后检查结果,解释故障原因并建议或应用修复。
运行要求
远程 streamable HTTP 端点,无需安装。支持 Client ID Metadata Documents 的客户端可用 OAuth 登录,否则以 Authorization Bearer 头传入 Relvato API 密钥(完全访问或只读)。需要 Relvato 账户与套餐;受套餐限制和每月运行配额约束。
安装前请注意
扫描针对线上站点真实运行,并计入每月运行配额。完全访问密钥或登录可添加和修改站点、监控项与计划、触发运行并应用 WordPress 修复;破坏性工具会被标记。API 密钥只显示一次,勿写入提交的文件。部分操作仍需在控制台完成,密钥类信息不会暴露。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Relvato,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/com.relvato%2Frelvato/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "relvato": {
      "type": "http",
      "url": "https://app.relvato.com/api/mcp"
    }
  }
}

README

[Relvato]

Relvato MCP server

Website monitoring your AI agent can run: add a site, set up and tune its monitors, run them, explain what broke and fix it with you.
Developer docs · Official MCP Registry · relvato.com


Relvato is a website monitoring platform. Its monitors cover uptime and SSL; user flows like sign-up, login, cart and checkout; security (vulnerable plugins, signs of a hack, changed files, new admins); Core Web Vitals and real-user speed; visual regressions and broken links; SEO and AI search, including your Google Search Console and Bing Webmaster Tools numbers; domain, DNS and email records; and legal compliance (cookie consent, accessibility). They run in a real browser on any website, go deepest on WordPress & WooCommerce, and run again every time the site changes.

This is Relvato's hosted Model Context Protocol server. There's nothing to install or run: point your MCP client at the URL and sign in to Relvato, or use a Relvato API key. This repository holds the connection details, the registry entry (server.json) and the Claude plugin (.claude-plugin/, skills/). The server itself runs at Relvato.

Endpointhttps://app.relvato.com/api/mcp
TransportStreamable HTTP (stateless JSON-RPC over POST)
AuthSign in (OAuth 2.1: PKCE, Client ID Metadata Documents, resource indicators), or an API key: Authorization: Bearer rlv_…
Registry namecom.relvato/relvato

Sign in (no key needed)

Sign-in works in clients that identify themselves with a Client ID Metadata Document (CIMD): Claude (claude.ai, Desktop, and Claude Code 2.1.81 or later), ChatGPT and VS Code. Relvato doesn't offer dynamic client registration, so a client that can only register itself that way (Cursor for now, the Gemini CLI, Docker's MCP gateway), or that has no sign-in at all (DeepSeek Harness), uses an API key instead.

In a client that supports it, add the endpoint with nothing else. The first time the client uses it, it opens Relvato's sign-in:

  1. Sign up (there's a free plan) or sign in.
  2. Allow the client to read your sites and results and to make changes: add and configure sites and monitors, change schedules and run scans.
  3. If you belong to an organization, pick which of its workspaces to connect. Your personal workspace isn't offered there, so use an API key for it.

Discovery follows the MCP authorization spec. A 401 points to /.well-known/oauth-protected-resource/api/mcp, and the authorization server is https://clerk.relvato.com (client_id_metadata_document_supported; no registration endpoint). The scopes are relvato:read, relvato:write and user:org:read.

Or use an API key

For scripts, for clients that can't sign in (no CIMD support), or for your personal workspace while you're in an organization:

  1. Open API access from the account menu, or go to app.relvato.com/api-access.
  2. Create a key:
    • Full access lets the agent add and configure sites and monitors, run them, review results and apply the fixes runs propose.
    • Read-only lets it read everything: sites, health and uptime, performance, runs, monitors, WordPress updates and activity, fix briefs and alert settings. With a read-only key the client only sees the read tools.
  3. Send it as Authorization: Bearer rlv_… (or x-api-key: rlv_…). A key is shown once. Keep it out of files you commit.

Connect

Claude (claude.ai, Desktop, mobile)

Settings → Connectors → Add custom connector. Enter the URL https://app.relvato.com/api/mcp, then Connect and sign in.

Claude Code

The plugin (recommended): the server plus six skills, three for any conversation about your sites and three for working from a code repo.

bash
claude plugin marketplace add Relvato/relvato-mcpclaude plugin install relvato@relvato

Then run /mcp, choose plugin:relvato:relvato, then Authenticate. The skills:

SkillWhat it does
/relvato:site-health [site]Reports how a site is doing across all its monitors (uptime, user flows, security, speed, SEO, design, domain, compliance) and what needs attention first. Reads results only.
/relvato:search-traffic [site] [google|bing]Explains the site's Google Search Console and Bing Webmaster Tools numbers against its usual: clicks, impressions, position, pages in the index, the pages and queries losing ground, crawl errors and sitemaps, plus SEO integrity and AI answer engines.
/relvato:security-review [site]Reviews the security monitors: vulnerable plugins, signs of a hack, changed files, new admins, exposed files and new scripts, in order of urgency, and what to do first.
/relvato:setup [url]Adds the site this repo deploys, proves ownership (it can add the verification meta tag to your code), picks monitors for what matters and starts the first runs.
/relvato:check-after-deploy [site] [group]Runs the site's monitors after a deploy, says how long they'll take, and reports what passed and what broke, with links. Only runs when you type it, since runs use your monthly quota.
/relvato:fix-failure [run]Reads a failed run and its fix brief, finds the cause in the code (including what changed since it last passed), makes the smallest fix with your OK, then re-runs that monitor.

Already added Relvato on claude.ai? With a Claude subscription, that connector shows up in Claude Code too. The skills work with either connection.

The plugin has no code of its own: it adds Relvato's hosted MCP server (https://app.relvato.com/api/mcp) and these skills, which are written instructions for Claude. Claude sends your requests to that server only, after you sign in to Relvato. Starting runs counts toward your plan's monthly runs, so the skills ask before they start any.

Just the server:

bash
claude mcp add --transport http relvato https://app.relvato.com/api/mcp

Then run /mcp, choose relvato, then Authenticate. With an API key instead:

bash
claude mcp add --transport http relvato https://app.relvato.com/api/mcp --header "Authorization: Bearer rlv_your_key"

Cursor

In ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project), with an API key. Cursor doesn't support Client ID Metadata Documents yet, so it can't use Relvato's sign-in:

json
{  "mcpServers": {    "relvato": {      "url": "https://app.relvato.com/api/mcp",      "headers": {        "Authorization": "Bearer rlv_your_key"      }    }  }}

Once Cursor supports CIMD, the URL alone will be enough: Cursor will offer to sign in.

VS Code

In .vscode/mcp.json. VS Code offers to sign in:

json
{  "servers": {    "relvato": {      "type": "http",      "url": "https://app.relvato.com/api/mcp"    }  }}

With an API key, VS Code can ask for it once and store it securely, so it never sits in the file:

json
{  "inputs": [    { "type": "promptString", "id": "relvato-key", "description": "Relvato API key (rlv_…)", "password": true }  ],  "servers": {    "relvato": {      "type": "http",      "url": "https://app.relvato.com/api/mcp",      "headers": {        "Authorization": "Bearer ${input:relvato-key}"      }    }  }}

Gemini CLI

Install the extension from its own repository, Relvato/relvato-gemini (it moved there in 3.5.2; if you installed it from this repository, run gemini extensions uninstall relvato first):

bash
gemini extensions install https://github.com/Relvato/relvato-gemini

It asks for your Relvato API key (create one) and keeps it in your system keychain; it never sits in a file. To change it later: gemini extensions config relvato. The Gemini CLI can't use Relvato's sign-in (it supports only dynamic client registration, which Relvato doesn't offer), so the extension uses the key.

Without the extension, add the server to ~/.gemini/settings.json:

json
{  "mcpServers": {    "relvato": {      "httpUrl": "https://app.relvato.com/api/mcp",      "headers": {        "Authorization": "Bearer rlv_your_key"      }    }  }}

DeepSeek Harness

Add the dsh-plugin-relvato bundle to a profile, with your API key in RELVATO_API_KEY (your environment or ~/.dsh/.env):

bash
dsh plugin --profile web add dsh-plugin-relvato

It's on npm; github:Relvato/dsh-plugin-relvato installs it straight from GitHub.

dsh's MCP client sends headers and has no sign-in, so it uses the key. The tools appear as mcp__relvato__<tool>.

Cline

In cline_mcp_settings.json (MCP Servers → Configure), with an API key:

json
{  "mcpServers": {    "relvato": {      "type": "streamableHttp",      "url": "https://app.relvato.com/api/mcp",      "headers": {        "Authorization": "Bearer rlv_your_key"      }    }  }}

Agents that set servers up themselves can follow llms-install.md.

Any other client

Add a remote HTTP (streamable HTTP) server with the endpoint above. If the client supports MCP sign-in with Client ID Metadata Documents (CIMD), that's all. Otherwise (including clients that only do dynamic client registration) add an Authorization: Bearer rlv_… header. In the common mcp.json format:

json
{  "mcpServers": {    "relvato": {      "type": "http",      "url": "https://app.relvato.com/api/mcp",      "headers": {        "Authorization": "Bearer rlv_your_key"      }    }  }}

Tools

58 tools, grouped by job in the order tools/list sends them. read tools work with any connection; full access tools need a full-access key, or a sign-in that allowed changes.

Set up

ToolWhat it doesAccess needed
list_sitesList the account's websites and whether each is ready to run monitors.read
add_siteAdd a website and get its setup step: connect the WordPress plugin, or verify the domain. Until then it can run the public monitors by hand, 3 times a day (real runs on the live site).full access
verify_siteCheck that setup step: the plugin connection, or the domain-verification DNS record or meta tag.full access
start_monitoring_for_goalsPick what matters (checkout, security, search, speed, …) and get the monitors that cover it on your plan.full access
list_checksThe monitors you can add to a site: what each catches, whether your plan includes it, and which are recommended. Before ownership is proven: which can run now (started by hand), and what proof adds.read
add_checksAdd monitors to a site; each one reports added, already there, or why not. Their schedule starts once ownership is proven.full access
dismiss_recommendationStop recommending a monitor for a site, or bring dismissed recommendations back.full access
calibrate_siteWooCommerce: read the store again (a product to buy, checkout type, currency) after it changed.full access
verify_vitals_beaconCheck the real-user Web Vitals beacon is installed.full access

Read

ToolWhat it doesAccess needed
site_overviewPlain-language health verdict: what needs attention, every monitor with its latest run and schedule, plan usage and, on WordPress, the site's AI abilities.read
get_site_healthPass rate now and over 30 days, the trend over 28–182 days, each group's briefing, and probe uptime with incidents.read
get_performanceLab and real-user Core Web Vitals, what slows the site down, and the top fixes with steps.read
get_checkOne monitor in full: schedule, its own settings (pages, masks, checkout details, …), ignored findings, its recipe if AI-written, latest run.read
list_runsRecent runs, newest first — by site, monitor or status, with paging.read
get_runOne run in detail: steps, findings, visual comparisons with image links, the fix it proposes, plugins it can update.read
get_fix_promptFor a run that found a problem: the same brief Relvato's own AI answers, to reason about the likely cause and fixes.read
get_updatesWordPress: auto-update windows and what they updated or rolled back, held versions, safe updates, hardening.read
get_safe_updateFollow a safe plugin update or deactivation until it passes or is undone.read
get_quarantineQuarantine mode: available or not, on until when, every change it saw, past sessions.read
get_activity_logWordPress: sign-ins, failed sign-ins, accounts, updates, settings and file edits, within your plan's history.read
get_notificationsThe dashboard's notifications: failing monitors, plugin or beacon problems, paused channels, billing.read
get_site_settingsA site's settings — what an agent may change and what stays in the dashboard (never secret values).read
get_alert_settingsWho is told about what: frequency, severity, each channel's state and routing — no URLs or secrets.read
get_status_pagesStatus pages and client reports: settings only, never a private link or recipients' addresses.read
list_heartbeatsA site's heartbeats (cron jobs that check in): state, schedule, last ping, missed check-ins — and the ping URLs on full access.read

Tune

ToolWhat it doesAccess needed
update_checkTurn a monitor on or off, or change when it runs: schedule, re-runs on WordPress updates, random extra runs.full access
pause_monitor_groupPause a whole monitoring group for 1 hour, 24 hours or until resumed, during maintenance; exactly the monitors it switched off come back on.full access
resume_monitor_groupResume a paused group now; a monitor the plan no longer allows stays off, with the reason.full access
update_visual_monitorAdd pages of your own by address to the visual monitor, set masks, devices, browsers and the threshold.full access
update_check_settingsA monitor's own settings: checkout details, extra pages to scan, what the site's AI feature must answer, DKIM selectors, …full access
add_custom_checkDescribe what must be true on a page; Relvato's AI writes the monitor.full access
edit_custom_checkGive a custom monitor a new goal or page; the AI writes a new recipe to approve.full access
reauthor_custom_checkAnswer the AI's question, or have it write a custom monitor's recipe again.full access
approve_custom_checkApprove a proposed recipe so the custom monitor runs (interactive recipes need an explicit OK).full access
update_site_settingsPacing, spacing between runs, firewall retry, flaky-monitor recovery, plugin rollback.full access
update_alert_settingsAlert timing and minimum severity. Who receives alerts and muting stay in the dashboard.full access
add_heartbeatCreate a heartbeat for a cron job or backup and get the URL the job requests when it succeeds.full access
update_heartbeatRename, reschedule, pause or resume a heartbeat. Deleting stays in the dashboard.full access

Run and act

ToolWhat it doesAccess needed
trigger_scanRun a site's monitors now — all, one group, or one monitor — and get the run ids back (uses the monthly quota). Before ownership is proven: the public monitors only, started by hand, 3 a day per domain.full access
cancel_queued_runsStop a site's queued runs; the one already going finishes.full access
request_ai_fixAsk Relvato's AI for a fix suggestion for a failed run (paid plans).full access
apply_fixWordPress: apply the one-click fix a run proposes — only that fix — then re-run the monitor.full access
start_safe_updateWordPress: update or deactivate a vulnerable plugin, re-check, and undo it if anything breaks.full access
start_quarantineAfter a hack: hourly security runs for 48 hours with plugin updates paused.full access
extend_quarantineKeep quarantine mode on for another 48 hours.full access
send_test_alertSend a test alert by email, Slack or webhook.full access
resume_webhookTurn webhook alerts back on after Relvato paused them for failed deliveries.full access
report_false_positiveTell Relvato's team a result is wrong; it changes nothing on the run.full access

Review results

ToolWhat it doesAccess needed
ignore_findingStop a finding from counting on a monitor (undoable). Only when you confirm it's expected.full access
unignore_findingMake an ignored finding count again.full access
bring_back_runBring back a failure Relvato AI set aside as likely noise.full access
accept_visual_changeMake this run's screenshot the new baseline for a page (undoable).full access
ignore_visual_changeIgnore the area that changed on a page from now on (undoable).full access
flag_visual_change_as_problemMark a visual change the AI let pass as a failure.full access
undo_visual_reviewUndo the last visual accept or ignore.full access
accept_structure_changeAdopt a page's new structure as its baseline (undoable).full access
ignore_structure_changeIgnore specific element changes on a page (undoable).full access
undo_structure_reviewUndo the last structure accept or ignore.full access

initialize and tools/list answer without signing in, so directories and clients can show what the server offers. Every tool call needs a sign-in or a key. A read-only key, or a sign-in without write access, gets only the read tools.

Things to ask

  • "Set up monitoring for example.com and tell me what I need to do to connect it."
  • "Add my pricing and blog pages to the visual monitor, and run it."
  • "Why did checkout fail on my shop last night, and how do I fix it?" (and, once you agree, "apply that fix")
  • "How fast is my shop for real visitors, and what's slowing it down?"
  • "The homepage redesign is intentional: accept the new screenshots."
  • "Who signed in to WordPress this week, and did anyone fail to?"
  • "Write a monitor that checks the Pro plan still shows a price."

What an agent can't do

The agent works under the same rules as the dashboard. Some things stay in the dashboard, with a person looking:

  • Skip ownership. Until a site's WordPress plugin is connected or its domain is verified, its public monitors run only when started by hand (3 a day per domain, no alerts); schedules, alerts and the monitors that act on the site wait for the proof.
  • Silence something for good. It can accept or ignore a result only in ways that can be undone, and only when you confirm the change is intended. Approving file-integrity, script and DNS changes (no undo; exactly what an attacker wants clicked) stays in the dashboard.
  • Change your site beyond what a run proposes. On WordPress it applies only the one-click fix a run proposes, and updates or deactivates a vulnerable plugin only with automatic undo. Destructive tools are marked, so your client asks you first.
  • Weaken alerts or protection. Who receives alerts, muting, stopping quarantine mode, the proxy and the firewall token stay in the dashboard.
  • Touch secrets. Connect tokens, signing secrets, webhook URLs and report share links are never exposed.
  • Delete anything, or change billing.
  • Go past your plan. Plan limits apply exactly as in the dashboard.

Limits

Requests are rate-limited per workspace, per minute, counted across the REST API and MCP together, whether you sign in or use a key:

PlanRequests per minute
Free30
Pro120
Business600
Agency2,400

Runs started with trigger_scan (and the runs that confirm apply_fix and start_safe_update) count toward the same monthly run quota as scheduled runs. See pricing.

Also available

  • REST API. The same read data at https://app.relvato.com/api/v1 (sites, health, performance, runs, monitors, updates, activity, notifications), using the same keys. See the developer docs.
  • Webhooks. A signed JSON event for every alert (Pro and up).

Support

This repository contains documentation and configuration only. The Relvato service is proprietary and covered by its terms. The contents of this repository are MIT-licensed (see LICENSE), so copy the config snippets freely.

来源:README.md,提交 026d6f6

工具

58

list_sites

List sites

List the websites in this Relvato account, with whether each is ready to run monitors.

无需输入参数。

add_site

Add a site

Start monitoring a website. Returns the site and its setup: until the owner proves ownership (connect the WordPress plugin, or verify the domain — the only option for non-WordPress sites), trigger_scan can run the public monitors by hand 3 times a day (setup.manualRuns); scheduled runs, alerts, update/deploy runs and the monitors that act on the site need the proof (setup.nextStep); setup.afterProof says what proof adds for this site on its plan. If the account already has a site on the same domain, that site is returned instead of a duplicate. How ownership is proven: https://www.relvato.com/docs/verify-site-ownership

输入参数url必填nameplatform必填

verify_site

Verify site setup

Check whether the site's ownership is proven: probes the WordPress plugin connection and/or looks for the domain-verification DNS TXT record / meta tag, or (method gsc / bing) asks Google Search Console / Bing Webmaster Tools. Returns the updated setup state. Docs: https://www.relvato.com/docs/verify-site-ownership

输入参数methodsiteId必填

start_monitoring_for_goals

Set up monitors for goals

The onboarding shortcut: pick what matters and Relvato adds the monitors that cover it on the current plan (plus uptime, SSL, errors, maintenance mode and structure). Goals: flows (checkout and sign-in), security, search, design, compliance (law compliance — accessibility today), speed, domain, custom, ai. Before the site's ownership is proven the monitors are added but don't run on their schedule yet (scheduleStarts).

输入参数goals必填siteId必填

list_checks

List available monitors

The monitors that can be added to a site: key, what it catches, whether the current plan allows it, whether it's recommended for this site, and whether it's already added. Before the site's ownership is proven, runsNow says which can run now (started by hand) and which after proof; for a site added as "other", withWordPressPlugin lists what the WordPress plugin adds.

输入参数siteId必填

add_checks

Add monitors

Add monitors to a site by key (from list_checks). Each key reports added / exists / rejected with the reason (plan, active-monitor limit, needs the WordPress plugin). Once the site's ownership is proven, new monitors get a daily schedule on plans that run daily (Pro and up) and a weekly one on Free, plus a re-run when the site changes on Pro and up (WordPress plugin updates, or pushes via the GitHub App). Before proof they're added but only run when trigger_scan starts them (scheduleStarts).

输入参数keys必填siteId必填

dismiss_recommendation

Dismiss a recommended monitor

Stop recommending a monitor for a site (list_checks marks recommendations), or bring every dismissed recommendation back with restoreAll.

输入参数keysiteId必填restoreAll

calibrate_site

Re-read the store

WordPress / WooCommerce: have Relvato read the store again (a product to buy, checkout type, guest checkout, currency) after the store changed. Runs in the background.

输入参数siteId必填

verify_vitals_beacon

Verify the real-user beacon

Check that the real-user Web Vitals beacon is on the site (its homepage, or data already arriving). get_site_settings has the snippet to install.

输入参数siteId必填

site_overview

Site overview

Plain-language health verdict for a site: what needs attention (real issues vs likely false positives), each monitor with its latest run and schedule, setup state, recommended monitors not yet added, and the account's run usage. On WordPress 6.9+ it also lists the site's AI abilities (WordPress Abilities API) from the latest exposure scan: which plugin registered each, whether AI assistants (MCP Adapter) or REST clients can use it, which ones anyone can run without signing in, and which can delete data.

输入参数siteId必填

get_site_health

Get a site's health over time

How a site has been doing: the share of monitors passing now (the Overview's "Monitors passing") and each of the last 30 days, the trend over 28, 90 or 182 days, each monitoring group's briefing (what needs attention, its likely cause and fix), and — on paid plans — uptime from Relvato's own probes (availability % and incidents over 30 days).

输入参数rangesiteId必填

get_performance

Get a site's performance

A site's speed: the performance summary, lab Core Web Vitals, real visitors' LCP / INP / CLS (p75, last 7 days against the 28 before, per page type and device), what slows it (the elements, images and scripts behind slow visits) and the top fixes with steps.

输入参数siteId必填

get_check

Get a monitor's settings

One monitor in full: on/off, when it runs (schedule, time zone, re-runs on WordPress updates, random extra runs, and whether the plan allows them), its own settings (the visual monitor's pages with their keys, masks, devices, browsers and threshold; the checkout's product, coupon, shipping and field answers; extra pages to scan; …), which settings sections update_check_settings accepts for it, the findings the user ignored, an AI-authored monitor's goal, status, question and recipe steps, and its latest run.

输入参数checkId必填

list_runs

List runs

Recent runs, newest first, optionally for one site, one monitor or one status. Each has the monitor (checkId, checkName, and its key in `journey`), status, trigger, timing and its error / warning; get_run has the detail. For older runs pass `before` (the startedAt of the last run you got).

输入参数limitbeforesiteIdstatuscheckId

get_run

Get run details

One run in detail: status, error and warnings (each with its key for ignore_finding; ignored ones marked; one Relvato never fixes carries noFix — why, and what to do instead), each step, visual comparisons (each with its comparisonId, links to the screenshot, the baseline and the diff that work for 10 minutes, and whether a decision on it can be undone), metrics, the one-click fix the run proposes if any, and Relvato AI's suggestion once requested. Large metrics are compacted, never the findings: daily series become summaries and what was left out is listed in metricsTrimmed.

输入参数runId必填

get_fix_prompt

Get the fix brief for a run

For a run that failed or found a problem: the same brief Relvato's own AI answers when the user clicks "Suggest a fix" — the site's detected stack, what the monitor verifies, what changed on the site just before, the exact error and findings, whether it was already failing earlier, and for Google / Bing Search the evidence that rules causes out. Use it as context to explain the likely cause and fixes; applying a fix stays with the user.

输入参数runId必填

get_updates

Get a site's WordPress updates

WordPress sites: the safe auto-update policy and its recent windows (what was updated, rolled back or skipped, and why), plugin versions held back after a rollback, safe updates or deactivations Relvato made and their outcome, and the hardening settings that are on.

输入参数siteId必填

get_safe_update

Get a safe update's progress

Follow a safe update or deactivation: applying → verifying → passed, or reverted with the monitors that broke.

输入参数changeId必填

get_quarantine

Get quarantine mode

Quarantine mode (WordPress, paid plans): 48 hours of hourly security runs after a cleanup, with plugin updates paused. Whether it's available, on, until when, every change it saw (expected or not), which monitors it watches, the runs it would use, and past sessions.

输入参数siteId必填

get_activity_log

Get the WordPress activity log

WordPress sites: who did what — sign-ins and failed sign-ins (with the network, not the full address), accounts and roles, application passwords, plugin / theme / core updates, setting and file edits, PHP errors and failed emails — newest first, within the plan's history (7 to 365 days).

输入参数dayslimitfiltersearchsiteId必填

get_notifications

Get notifications

The dashboard's notifications: failing monitors, a disconnected or outdated WordPress plugin, a silent real-user beacon, domain and ownership problems, safe updates that need a look, paused Slack or webhook alerts, and billing.

无需输入参数。

get_site_settings

Get a site's settings

A site's Settings tab as values: what update_site_settings may change (name, request pacing, spacing between runs, firewall retry delay, flaky-monitor recovery streak, plugin rollback, counting Relvato's own visits in real-user data), what only the dashboard changes (browser identity, proxy, firewall allowlist token — never its value — GitHub, Google / Bing connections), the WordPress plugin's version, and the real-user beacon snippet.

输入参数siteId必填

get_alert_settings

Get alert settings

Who is told about what: how often (instant, daily / weekly digest), the minimum severity, each channel (email, Slack, webhook — whether the plan includes it, whether it's set up, paused, and `on` = alerts actually go out on it), which sites are muted and which monitor types go to which channel (only channels that are on). Never includes webhook URLs or secrets. Changing them is done by the user in Alert settings.

无需输入参数。

get_status_pages

Get status pages and client reports

Public status pages (title, public link, sites, on/off) and monthly client reports per site (on/off, how many recipients, last sent), plus the report branding. Never a report's private link or recipients' addresses. Edited in the dashboard's Agency page.

无需输入参数。

list_heartbeats

List a site's heartbeats

A site's heartbeats — cron jobs, backups and scheduled tasks that check in by requesting their own URL: each one's state (new = waiting for its first ping, up, down), schedule (period + grace, in seconds), last ping, when the next is due at the latest, whether the plan covers it, recent missed or failed check-ins and pings, plus the account's heartbeats used / allowed. Full-access connections also get each ping URL (it's what the job requests; anyone with it can send pings).

输入参数siteId必填

update_check

Update a monitor

Turn a monitor on or off, or change when it runs: its schedule (up to weekly on Free, daily on Pro, hourly on Business, every 15 minutes on Agency), re-runs when the WordPress site changes (plugin, theme, core or WooCommerce updates; Pro and up) and random extra runs (Business and up). Only the fields you pass change. Its own settings (pages, URLs, checkout details) are changed with update_check_settings or update_visual_monitor.

输入参数attzdoweventsrandomcheckId必填enabledschedule

pause_monitor_group

Pause a monitoring group

Pause one monitoring group on a site for 1 hour, 24 hours or until resumed (maintenance, a redesign, a migration). The group's monitors that are on are switched off and remembered; when the time is up, or with resume_monitor_group, exactly those are switched back on, as far as the plan allows. Pausing a group that's already paused changes when it resumes. Pausing Security while the site is in quarantine stays in the dashboard. Tell the user which monitors stop watching and for how long, and get their go-ahead first. site_overview lists paused groups.

输入参数group必填siteId必填duration必填

resume_monitor_group

Resume a monitoring group

Resume a paused monitoring group now: the monitors its pause switched off go back on (a monitor the plan no longer allows stays off, with the reason in keptOff). A group that isn't paused is left as it is.

输入参数group必填siteId必填

update_visual_monitor

Change the visual monitor's pages

Edit the visual regression monitor: add pages (a built-in one by key, or a page of your own by its address on the site, e.g. "/pricing"; up to 10 of your own), rename or re-point a page of your own, change any page's masks (CSS selectors painted over before comparing, for clocks, carousels, ads), remove pages, and set devices, browsers, full-page capture, the change threshold (percent) and the AI review. A page whose masks or address change gets a new baseline: its next run captures one for the user to approve. At most 40 screenshots a run (pages × devices × browsers). get_check lists the current pages and their keys.

输入参数addremoveupdatecheckId必填devicesaiReviewbrowsersfullPagethresholdPercent

update_check_settings

Change a monitor's settings

Change a monitor's own settings. Each monitor takes only its sections (get_check lists them as editable.sections): checkout (checkout monitors), devices (flow and page monitors), errorScan, brokenLinks, accessibilityPages (accessibility), uptime (the URL, text that must / must not appear, accepted statuses, timeout, alert after N minutes, maintenance windows, an API endpoint's method / body / JSON rules), aiOutput, browseUrl (storefront), shopUrl / productUrl (prices), dkimSelectors (email authentication), structurePages (structure drift), webVitalsDevices (Core Web Vitals). Every address must be a full URL on the site's own domain. A section you pass replaces that section; the rest stays. Turning it on or off and its schedule: update_check. The visual monitor: update_visual_monitor.

输入参数uptimecheckId必填devicesshopUrlaiOutputcheckoutbrowseUrlerrorScanproductUrlbrokenLinksdkimSelectorsstructurePages另有 2 个

add_custom_check

Create a custom monitor

Describe in plain words what to verify on a page (e.g. "the Pro plan shows a price", "search for 'shoes' returns results") and Relvato's AI writes a monitor for it, in a minute or two. Follow it with get_check: status goes authoring → proposed (show the user its rationale and steps, then approve_custom_check) or needs-input (answer with reauthor_custom_check) or failed (with advice). Read-only by default; interactive: true lets it click and type (search, filters, forms). Plan-gated; counts toward the active-monitor limit.

输入参数url必填goal必填namesiteId必填interactiveauthenticated

edit_custom_check

Change a custom monitor

Give a custom monitor a new goal, page, name or mode. Its current recipe is dropped and the AI writes a new one, which needs approving again before the monitor runs.

输入参数url必填goal必填namecheckId必填interactiveauthenticated

reauthor_custom_check

Rewrite a custom monitor's recipe

Have the AI write a custom monitor's recipe again: answer its question (status needs-input) with `answer`, or retry after it failed or went stale. The monitor stops running until the new recipe is approved.

输入参数answercheckId必填

approve_custom_check

Approve a custom monitor

Approve a custom monitor's proposed recipe (status proposed) so it runs and alerts from now on. Show the user its rationale and steps first (get_check). A recipe in interactive mode clicks or types on the live site: approve it only after the user agrees, with ack: true.

输入参数ackcheckId必填

update_site_settings

Change a site's settings

Change a site's operational settings. Only the fields you pass change. Browser identity, the proxy, the firewall token, GitHub and search-engine connections, and deleting the site stay in the dashboard.

输入参数namesiteId必填aiTriagepacingMsjobSpacingMsrecoverStreakpluginRollbackchallengeRetryMsrumIncludeOwnChecks

update_alert_settings

Change alert timing and severity

Change how often alerts are sent (instant and/or a daily or weekly digest), when the digest goes out, the minimum severity, and whether every run is emailed. Only the fields you pass change. Who gets alerts (the address, Slack, webhooks), muting sites or monitor types, and turning email alerts off stay in the dashboard.

输入参数everyRuntimezonefrequencydigestTimeminSeveritydigestWeekday

add_heartbeat

Add a heartbeat

Create a heartbeat for a job the user runs (cron job, backup script, scheduled task, CI job). Returns its ping URL: the job requests it when it succeeds (e.g. `your-job && curl -fsS -m 10 --retry 3 <pingUrl>`), and `<pingUrl>/fail` to report a failure (a POST body is kept with the ping). No ping within period + grace, or a failure, alerts the user at once; a new heartbeat waits for its first ping and never alerts before it. Adds the site's Heartbeats monitor with the first one. Plan limits per account: Free 2, Pro 20, Business 100, Agency 500.

输入参数tzcronname必填siteId必填graceSecperiodSec

update_heartbeat

Update a heartbeat

Rename a heartbeat, change its period or grace, or pause / resume it. Only the fields you pass change. Paused: pings are still recorded but nothing is judged or alerted (an open outage ends without a "back" alert); resumed, it waits for its next ping. Deleting a heartbeat stays in the dashboard.

输入参数tzcronnamepausedgraceSecperiodSecheartbeatId必填

trigger_scan

Run monitors now

Run a site's enabled monitors now — or one group of them (group), or one monitor with checkId, even if it's turned off. Each run counts toward the monthly run quota. Runs go one at a time and take from seconds to a few minutes each, so all of a site's monitors usually take several minutes: the result's estimatedMinutes and tellUser say how long, so tell the user to expect a wait. Returns the runIds to follow with get_run or list_runs; cancel_queued_runs stops the ones that haven't started.

输入参数groupsiteId必填checkId

cancel_queued_runs

Cancel queued runs

Stop a site's runs that are queued but haven't started (after a big trigger_scan, or before maintenance). Cancelled runs can't be brought back: start them again with trigger_scan. The run that's already going finishes; nothing already recorded is deleted. Get the user's go-ahead first.

输入参数siteId必填

request_ai_fix

Ask Relvato AI for a fix

Ask Relvato's AI to suggest a fix for a run that failed or found a problem (the dashboard's "Suggest a fix"). It answers in a minute or two: read it as aiFix on get_run. Plan-gated. get_fix_prompt gives the same brief for you to reason with yourself, without waiting.

输入参数runId必填

apply_fix

Apply a run's proposed fix

WordPress sites: apply the one-click fix a run proposes (get_run proposedFix: e.g. clear a stuck maintenance file, turn indexing back on, roll back the plugin update that broke it) through the Relvato plugin, then re-run the monitor to confirm. Only that exact fix can be applied. Tell the user what it changes (proposedFix.why and undo) and get their go-ahead first. undo: true reverts the last fix applied on the site. With Relvato plugin 1.77.0+ Relvato never changes the site remotely: the answer is applyInWordPress, a link where an administrator applies it in WordPress — give it to the user.

输入参数undorunId必填

start_safe_update

Safely update or deactivate a plugin

WordPress sites: for a vulnerable or outdated plugin a run found (get_run warnings with a plugin), update it (or deactivate it) through the Relvato plugin, re-run the monitors that were passing, and undo it if any of them breaks. Counts as runs. Follow it with get_safe_update. Get the user's go-ahead first. With Relvato plugin 1.77.0+ the change is made in WordPress by an administrator (answer: applyInWordPress, a link to give the user); Relvato verifies it, and if it breaks a monitor Relvato alerts the user to undo it there.

输入参数runId必填action必填plugin必填

start_quarantine

Start quarantine mode

After a hack or a cleanup (WordPress, paid plans): run the security monitors every hour for 48 hours, pause plugin updates (with Relvato plugin 1.77.0+ that pause is a tick box in WordPress → Relvato), and alert on every unexpected change. Uses runs (get_quarantine says how many). Stopping it early stays in the dashboard.

输入参数siteId必填

extend_quarantine

Extend quarantine mode

Keep quarantine mode on for another 48 hours from now.

输入参数siteId必填

send_test_alert

Send a test alert

Send a test alert on one channel (email, slack or webhook) to check it arrives. Slack and webhooks are on paid plans and must be set up in the dashboard.

输入参数channel必填

resume_webhook

Resume webhook alerts

Turn webhook alerts back on after Relvato paused them for repeated failed deliveries (fix the endpoint first; send_test_alert checks it).

无需输入参数。

report_false_positive

Report a false positive

Tell Relvato's team a run's result is wrong (it failed or warned about something that's fine). Sends the run's details and your note to Relvato's support team; it changes nothing on the run. To stop being told about a finding, use ignore_finding.

输入参数noterunId必填

ignore_finding

Ignore a finding

Stop a finding (a warning on a run, by its key from get_run) from counting on this monitor: it stays on the run, marked ignored, but no longer alerts or fails later runs. Undo with unignore_finding. Only do this when the user says the finding is expected.

输入参数key必填runId必填

unignore_finding

Stop ignoring a finding

Make an ignored finding count again (get_check lists a monitor's ignored findings with their keys; get_run marks them on a run).

输入参数key必填runIdcheckId必填

bring_back_run

Bring back a set-aside failure

Relvato AI triage (a site on level "aside") set this failed run aside as likely noise — get_run shows aiTriage.setAside. Make it count as a failure again: in the bell, the digest and site health. No alert is re-sent. Use it when the user says the failure is real.

输入参数runId必填

accept_visual_change

Accept a visual change

The visual monitor found a page that changed on purpose (a redesign, new content): make this run's screenshot the new baseline for that page, device and browser. Undo with undo_visual_review. Only when the user confirms the change is intended.

输入参数comparisonId必填

ignore_visual_change

Ignore a changed area

Ignore the area that changed on this comparison from now on (a clock, a rotating banner): it's added to the baseline's ignored regions. Undo with undo_visual_review. A mask (update_visual_monitor) is often the better fix.

输入参数comparisonId必填

flag_visual_change_as_problem

Flag a visual change as a problem

The AI review let a visual change pass, but it's actually broken: mark it a failure. The run counts as failed in Relvato and shows as needing attention (notifications, Monitors passing); no message is sent.

输入参数comparisonId必填

undo_visual_review

Undo a visual decision

Undo the last accept or ignore on this page, device and browser: the earlier baseline comes back.

输入参数comparisonId必填

accept_structure_change

Accept a structure change

The structure monitor found a page whose layout changed on purpose: adopt this run's structure as the new baseline for that page (pageKey), or for every changed page on the run (all: true). Undo with undo_structure_review.

输入参数allrunId必填pageKey

ignore_structure_change

Ignore a structure change

Ignore specific element changes on a page from now on (signatures from get_run metrics.pages[].added / removed / countChanges[].sig), e.g. a widget that comes and goes. Undo with undo_structure_review.

输入参数runId必填pageKey必填signatures必填

undo_structure_review

Undo a structure decision

Undo the last accept or ignore on a page of the structure monitor.

输入参数runId必填pageKey必填

版本历史

7
  1. v3.5.1最新Oct 24, 2026
  2. v3.5.0Oct 19, 2026
  3. v3.4.0Oct 18, 2026
  4. v3.2.0Oct 6, 2026
  5. v3.0.0Oct 2, 2026
  6. v2.1.0Sep 29, 2026
  7. v2.0.1Sep 29, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分