Webskan

io.github.kamilobstawskiagent-ux由 GitHub 帳號 kamilobstawskiagent-ux 發布v0.1.0更新於 Nov 7, 2026

Audit and re-check a live website: Lighthouse, SEO, accessibility, security, links, journeys.

已驗證Streamable HTTP可網頁執行網頁搜尋與抓取開發者工具安全與監控

概覽

AI 產生的概覽

Webskan 從外部稽核公開上線的網站——Lighthouse、SEO、無障礙、安全標頭、連結與使用者旅程——並在修正後重新檢查。

可以做什麼
  • 快速掃描單一頁面，取得 Lighthouse 行動版分數、指標、HTTPS/TLS、安全標頭與頁面 SEO 標籤
  • 啟動整站非同步爬取，最多 30 個頁面，涵蓋失效連結、逐頁 SEO、無障礙、安全與使用者旅程
  • 查詢稽核狀態，或讀取依嚴重程度排序的發現項目及其對應頁面網址
  • 部署修正後重跑同一稽核，取得已修正、仍存在、新增與未驗證發現項目的差異比對
適用情境
適合在部署網站變更後立即驗證結果，或需要對公開網站做技術稽核並形成「稽核—修正—複查」循環時使用。它為唯讀，且只看網站的公開版本。
執行需求
遠端 MCP 端點，使用 streamable HTTP；免費方案不需帳號或金鑰。付費開發者方案可選擇在 Authorization 標頭中帶入 Bearer 授權金鑰以提高額度。目標網站必須可公開存取，不支援 localhost、私有 IP、.local 以及需要登入的網站。
安裝前請注意
免費方案有速率限制：單頁掃描每 IP 每小時 10 次；整站稽核每 IP 每 24 小時 2 次，且每個主機每 24 小時僅 1 次，對同一主機重複呼叫會回傳既有稽核。付費方案每月 29 美元，需在 Authorization 標頭中帶入授權金鑰。稽核為唯讀，但目標網址會傳送給第三方服務，結果會被快取並保留（掃描結果 7 天，稽核結果 30 天）。Lighthouse 分數每次執行會有數分波動。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Webskan，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.kamilobstawskiagent-ux%2Fwebskan/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "webskan": {
      "type": "http",
      "url": "https://webskan.com/mcp"
    }
  }
}

README

Webskan plugin for Claude Code

Audit and re-check the website your agent just shipped. The plugin adds the Webskan remote MCP server (https://webskan.com/mcp) and a /webskan:site-check skill that teaches Claude Code the loop: audit, fix the high and medium findings by id, deploy, re-check, report fixed / still open / new.

What Webskan checks, from the outside, in a real mobile browser: Lighthouse (mobile and desktop), a crawl of up to 30 pages with SEO checks on each, axe-core accessibility (WCAG 2.1 AA), security headers and TLS, broken links, forms, the cookie banner, and customer journeys (404 page, menu, search, cart to checkout). Every finding has a stable id, so the re-check is an exact diff.

Install

In Claude Code:

/plugin marketplace add kamilobstawskiagent-ux/webskan-claude-plugin/plugin install webskan@webskan

Or from the shell:

claude plugin marketplace add kamilobstawskiagent-ux/webskan-claude-pluginclaude plugin install webskan@webskan

No account and no key are needed for the free plan. If you only want the MCP server without the skill:

claude mcp add --transport http webskan https://webskan.com/mcp

Use

/webskan:site-check https://mysite.com

or just ask: "audit https://mysite.com and fix the high-severity findings, then recheck".

Tools provided by the server: scan_website, audit_website, get_audit, recheck_website. Details, limits of the free plan and configuration for Cursor, VS Code, Codex CLI and other clients: https://webskan.com/developers/

Free plan limits

  • scan_website: 10 per hour per IP (120 per hour overall); results cached 24 h per host, kept 7 days.
  • audit_website / recheck_website: 2 per IP per 24 h and 1 per host per 24 h; 1-30 pages; results kept 30 days.
  • Public websites only - no localhost, private networks or sites behind a login.

Developer plan ($29/month): 30 whole-site audits per 24 h per key and no one-audit-per-host-per-day window. Pass the key as Authorization: Bearer <key> (an http server with headers in your MCP config). Details: https://webskan.com/developers/#teams

Layout

.claude-plugin/marketplace.json      marketplace "webskan"plugins/webskan/  .claude-plugin/plugin.json         plugin manifest  .mcp.json                          remote MCP server  skills/site-check/SKILL.md         the audit -> fix -> recheck loop

License

MIT. Contact: [email protected]

來源：README.md，提交 47dcb83

工具

4

scan_website

Quick website scan

Quick scan of one page (the URL you pass, usually the home page): Lighthouse mobile scores (performance, accessibility, best practices, SEO) with LCP/CLS/TBT/page weight/requests, plus HTTPS redirect, TLS, HSTS and security headers, title, meta description, H1, image alt texts, viewport, canonical, Open Graph, mixed content. Takes 30-60 s; waits up to 90 s and otherwise returns status "pending" with a scanId – call again with the same URL in 30 s. Results per host are cached for 24 h (field cached: true). Free, 10 calls per hour per IP. Use it right after a deploy as a smoke check; use audit_website for the whole site.

輸入參數url必填

audit_website

Full website audit (async)

Starts a full technical audit of a whole website and returns immediately with an auditId (poll get_audit every 20-30 s; typically done in 1-5 min). The audit crawls up to `pages` pages (1-30, default 15) following internal links and the sitemap, and checks: broken internal/external links with the pages they sit on, per-page SEO (title, description, H1, canonical, alt texts, Open Graph), Lighthouse mobile and desktop, WCAG accessibility (axe) with selectors, HTTPS/TLS/security headers, robots/sitemap, platform detection and customer journeys (menu, search, forms, 404). No LLM, deterministic, read-only. Free plan: 2 audits per IP per 24 h and 1 per host per 24 h (a repeat call for the same host returns the existing audit). With Authorization: Bearer <Webskan Developer license key>: 30 per 24 h.

輸入參數url必填pages

get_audit

Get audit status / result

Returns the status (queued / running with ETA) or the finished result of an audit started with audit_website or recheck_website: summary counts by severity, Lighthouse mobile+desktop scores, findings sorted high → medium → low → info (each with id, area, severity, title, detail and the pages it was found on), pagesCrawled, finalUrl, platform. For a re-check it also returns diff: fixed / open / new / unverified findings and Lighthouse before/after. Poll every 20-30 s while status is queued or running.

輸入參數auditId必填

recheck_website

Re-check after fixes (diff)

Runs the same audit again (same URL, same number of pages) linked to the original auditId, so get_audit returns a diff: fixed / still open / new / unverified findings and Lighthouse before → after. Call it after you have deployed fixes. Asynchronous like audit_website (returns a new auditId to poll with get_audit) and counted against the same limits (free: 2 audits per IP per 24 h).

輸入參數auditId必填

版本歷史

1
  1. v0.1.0最新Nov 7, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分