Mcp Cookie Consent Audit

com.mambabuilt由 mambabuilt.com 發布v1.0.2更新於 Nov 7, 2026

Audit a site's cookie consent from the EU: trackers before consent, reject, after reject, GPC.

發布方自己的服務:audit.domains - Domain Valuation

概覽

AI 產生的概覽

透過 Apify actor 從歐盟位址稽核網站 Cookie 同意行為,回報同意前、拒絕後及 GPC 下的追蹤狀況。

可以做什麼
  • 從歐盟位址稽核一個或多個網域的 Cookie 同意行為,單次執行最多 500 個網域,並可選擇歐盟代理國家。
  • 每個網域回傳一列結果:偵測到的同意管理平台、接受與拒絕控制項是否位於橫幅第一層、同意前與拒絕後的追蹤 Cookie 與追蹤主機請求、Google Consent Mode 的 denied ping,以及 Global Privacy Control 比對。
  • 比對未點擊、點擊拒絕後與啟用 GPC 三種工作階段,並提供訊號清單與所用追蹤器清單版本。
適用情境
適合隱私、法遵或行銷審查情境,用來檢查客戶或競品網站是否在同意前就設定追蹤器、是否在第一層提供拒絕按鈕、是否回應 Global Privacy Control。也適合從指定歐盟國家批次檢查多個網站。
執行需求
以 npm 套件形式透過 stdio 在本機執行,需要 Node.js 18 或更新版本。需要 Apify 帳號,並以環境變數 APIFY_TOKEN 提供 Apify API 權杖;沒有權杖時僅能列出工具。所有工作都在 Apify 上執行,需要網路連線。
安裝前請注意
每個受稽核網域都會消耗 Apify 額度並計入你的 Apify 帳號(依網域與依執行啟動計費),費用隨網域數量增加;可用選填的 max_charge_usd 輸入限制單次執行花費。APIFY_TOKEN 屬機密,應避免寫入共用設定。結果是供審查的訊號而非法律結論;除非設定 skip_cache,否則會沿用快取結果。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcp Cookie Consent Audit,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Cookie Consent Audit MCP Server

[Glama score] [MCP Registry] [npm version] [npm downloads] [license] [mcpservers.org]

[Cookie Consent Audit MCP server]

An MCP server for the Mamba Labs GDPR Cookie Banner and Consent Checker actor on Apify. Send a domain or a list of domains. Each one is loaded from an EU address in fresh browser sessions, and you get back one row of consent signals per domain: the consent platform, reject on the first layer, trackers and tracking cookies before consent and after a reject, and the Global Privacy Control response.

What's Inside

What it does

Audit one or more websites for cookie consent behavior from an EU address. Each domain is loaded in fresh browser sessions: once before any consent click, once after clicking the reject control on the first layer of the banner, and once with Global Privacy Control on. Returns one row per domain: the consent management platform found (TCF __tcfapi, OneTrust, Cookiebot, Usercentrics, Didomi, and others), whether accept and reject controls sit on the first layer, tracking cookies and requests to known tracker hosts before consent and after the reject, Google Consent Mode denied pings, the GPC comparison and /.well-known/gpc.json, a list of signals, and the version of the fixed tracker list used. Signals for review, not legal findings. Cookie values are never returned. A run that does not succeed is returned as an error with its run ID. Read-only on the audited sites; requires an APIFY_TOKEN and consumes Apify credits per audited domain.

All of the work runs on Apify. This package is a thin client that starts the actor run, waits for it, and hands back the dataset rows.

Quick start

You need Node.js 18 or newer and an Apify account with an API token.

Add this to your Claude Desktop config (claude_desktop_config.json), Cursor, or any MCP client:

json
{  "mcpServers": {    "mamba-cookie-consent-audit": {      "command": "npx",      "args": [        "-y",        "@mambalabsdev/mcp-cookie-consent-audit"      ],      "env": {        "APIFY_TOKEN": "your-apify-token"      }    }  }}

Restart the client. The audit_cookie_consent tool appears.

Prerequisites

Example prompts

  • "Audit example.de for cookie consent from Germany and tell me what fires before consent."
  • "Check these five client sites from France: is there a reject button on the first layer, and does anything still track after a reject?"

Tool

audit_cookie_consent. One tool. Example arguments:

json
{  "domains": ["example.de", "example.fr"],  "proxy_country": "DE"}

Inputs

Every buyer facing input of the actor, unchanged. Omitted inputs take the actor's own defaults.

InputTypeRequiredDescription
domainstringnoThe website to audit, for example example.de or https://www.example.de/. The homepage is audited. Give domain or domains.
domainsarraynoMore domains or URLs to audit in the same run. Duplicates are skipped. Up to 500 per run.
proxy_countrystringnoThe EU country the browser connects from: DE, FR, NL, IE, IT, ES, SE, PL, AT, BE, DK, FI, or none. Default DE. none is not an EU vantage point.
check_gpcstringnoAlso run the Global Privacy Control session and read /.well-known/gpc.json. Default true.
max_charge_usdstringnoOptional. Stop the run before the audit charges would pass this amount.
skip_cachestringnoA domain audited in the last 24 hours with the same settings comes back from cache at no charge. true audits it again. Default false.

Pricing

Pay per event on Apify, billed to your Apify account. Prices in USD.

EventFree planBronzeSilverGold
domain-audited, per fully audited domain$0.05$0.0475$0.045$0.0425
apify-actor-start, per run start$0.001$0.001$0.001$0.001

Blocked, timed out, partial, cached, and invalid rows are never charged.

Your keys

The actor needs no provider key. It loads public pages with the page and its banner deciding requests sent through the Apify proxy, and holds no key of its own.

Full actor documentation

apify.com/mambalabs/cookie-consent-audit

License

MIT. See LICENSE.

來源:README.md,提交 e936a45

工具

1

版本歷史

2
  1. v1.0.2最新Nov 5, 2026
  2. v1.0.1Oct 19, 2026

評分

已滿足適用檢查項的 90%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分
  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

其他 Audit 整合