# Foliora Managed AI Search (remote · www.foliora.ai)

Foliora MCP for public discovery, account reads, and agent execution of human-approved changes.

- Trust score: 38/100 (low)
- Change this week: −41
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- remote · `www.foliora.ai`: 38/100 (this document), [markdown](https://verifymcp.io/servers/ai-foliora-search/www.md), [page](https://verifymcp.io/servers/ai-foliora-search/www)

## Channel facts

- Endpoint: `https://www.foliora.ai/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.4.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Endpoint Security**: 94/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
  - The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents.
- **Transport & Reachability**: 0/100
  - Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.
- **Schema Quality & AI Usability**: 0/100
  - Schema blocked by authentication: the endpoint requires auth we don't have to read it.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.
- **Tool Safety**: 0/100
  - Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.
- **Capabilities**: 0/100
  - Capabilities blocked by authentication: the endpoint requires auth we don't have to read them.

**Unverified: 6 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### How do I install the Foliora Managed AI Search MCP server?

Foliora Managed AI Search is a hosted endpoint at https://www.foliora.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http ai-foliora-search 'https://www.foliora.ai/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "ai-foliora-search": {
      "url": "https://www.foliora.ai/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ai-foliora-search": {
      "type": "http",
      "url": "https://www.foliora.ai/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.ai-foliora-search]
url = "https://www.foliora.ai/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-foliora-search": {
      "type": "remote",
      "url": "https://www.foliora.ai/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ai-foliora-search --url 'https://www.foliora.ai/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ai-foliora-search:
    url: "https://www.foliora.ai/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "ai-foliora-search": {
      "Transport": "http",
      "Url": "https://www.foliora.ai/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add ai-foliora-search -t streamable-http -u 'https://www.foliora.ai/mcp'
```

### Other

```json
{
  "mcpServers": {
    "ai-foliora-search": {
      "type": "http",
      "url": "https://www.foliora.ai/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-17 (score 38, −42)

- [security regression] Endpoint reachability: reachable → behind authorisation
- [security regression] Tool safety: pass → unverified
- [security regression] Transport: pass → unverified
- [security regression] Stability: 0.67 → unverified
- [security improvement] Authorization: partial → pass
- [security] First check of Authorization: partial
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-09-16 (score 80, 0)

- [security regression] A breaking change shipped without a version bump: still 0.4.0
- [security regression] Tool “get_change_status” was removed
- [security regression] Tool “get_site_brief” was removed
- [security regression] Tool “list_approved_changes” was removed
- [security regression] Tool “request_recrawl” was removed
- [security regression] Tool “verify_publication” was removed
- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “approve_change” rewrote its description, which is the text the model reads
- [security] Tool “get_page_job” rewrote its description, which is the text the model reads
- [security] Tool “list_page_jobs” rewrote its description, which is the text the model reads
- [security] Tool “report_finding_fix” rewrote its description, which is the text the model reads
- [security] Tool “report_publication” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: pass → fail

### 2026-09-15 (score 80, +1)

No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-13 (score 79, +1)

No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-11 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-09 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-08 (score 76, 0)

- [functional regression] Schema quality: 853 → 1142
- [functional] New tool “approve_change”
- [functional] New tool “get_page_job”
- [functional] New tool “list_page_jobs”
- [functional] New tool “reject_change”

### 2026-09-06 (score 76, 0)

- [security] Tool “get_product” rewrote its description, which is the text the model reads
- [functional regression] Tool coverage: 20% → 13%
- [functional regression] Schema quality: 568 → 853
- [functional] New tool “get_change_status”
- [functional] New tool “list_findings”
- [functional] New tool “report_finding_fix”
- [functional] New tool “request_recrawl”

## MCP tools (12)

### `get_product` (~54 tokens)

Get Foliora product facts

Return Foliora product facts: brand, per-site plans, canonical URLs, and product boundaries. Use when the user asks what Foliora is, how much it costs, or which URL to open. Does not crawl a site.

Output parameters:

- `addons` (array)
- `brand` (string)
- `category` (string)
- `doesNot` (array)
- `hero` (string)
- `links` (object)
- `mcpUrl` (string)
- `plans` (array)
- `previewUrl` (string)
- `pricingUrl` (string)
- `support` (string)
- `workflow` (string)

### `get_snapshot` (~67 tokens)

Get a Foliora preview snapshot

Fetch a Foliora preview snapshot the human already started. Requires the 32-character hex token from /preview/{token}. Returns public findings and pages only. Unknown tokens are not_found. Does not start a crawl.

Input parameters:

- `token` (string, required): Public snapshot token from a Foliora preview URL.

Output parameters:

- `aiPresence` (object|null)
- `errorCode` (string|null)
- `findings` (array)
- `googlePresence` (object|null)
- `host` (string)
- `locked` (boolean)
- `pageCount` (number)
- `pages` (array)
- `phase` (string|null)
- `processing` (boolean)
- `status` (string)
- `token` (string)
- `websiteUrl` (string)

### `create_preview_link` (~72 tokens)

Create a Foliora preview link

Build a Foliora /preview URL for a public website. Does not crawl, does not take credentials, and does not change the site. Send the human to the returned previewUrl so they can start the snapshot in a browser.

Input parameters:

- `websiteUrl` (string, required): Public website URL or host. https is optional.

Output parameters:

- `host` (string)
- `previewUrl` (string)
- `websiteUrl` (string)

### `list_sites` (~35 tokens)

List the customer's Foliora sites

List sites owned by the authenticated Foliora account with crawl and finding status. Requires OAuth or a Foliora API key with read scope.

Output parameters:

- `sites` (array)

### `get_approved_change` (~43 tokens)

Get one approved Foliora change

Return an already-approved canonical hash and its ordered typed operations. Apply exactly these values; do not reinterpret or regenerate them.

Input parameters:

- `changeSetId` (string, required)

Output parameters:

- `approvedAt` (string)
- `brief` (string)
- `canonicalHash` (string)
- `changeSetId` (string)
- `host` (string)
- `jobId` (string)
- `operations` (array)
- `rationale` (string)
- `siteId` (string)
- `title` (string)

### `report_publication` (~100 tokens)

Report an approved change was published

Record proof that the customer's agent applied every operation from an already-approved canonical hash. Foliora verifies the live page from here on its own and the change shows as done on the customer's dashboard. This does not approve a change. Every receipt value must exactly match Foliora's stored operation.

Input parameters:

- `changeSetId` (string, required)
- `expectedHash` (string, required)
- `idempotencyKey` (string, required)
- `receipt` (object, required)

Output parameters:

- `created` (boolean)
- `executionId` (string)
- `nextAction` (string)
- `receiptId` (string)
- `verificationQueued` (boolean)
- `verificationReady` (boolean)
- `verificationReason` (string|null)
- `verificationRunId` (string|null)

### `list_findings` (~78 tokens)

List a site's open findings

List the crawl findings still open on a site: SEO and AI-readiness plumbing such as missing descriptions, blocked AI crawlers, missing llms.txt, stale articles. Each row carries a code, severity, evidence URL, and plain-language fix guidance. Read-only.

Input parameters:

- `siteId` (string, required)
- `status` (string)

Output parameters:

- `findings` (array)

### `list_page_jobs` (~119 tokens)

List what Foliora proposes for a site

The page changes Foliora proposes for one owned site, highest impact first — the same list the customer's dashboard shows. Each row carries `fix`: the customer-facing state (Foliora is working / Your turn / Published / Verified live / Needs a hand), why there is no draft to act on when there is none, the live status of every finding it set out to fix, and nextAction. Use get_page_job to read a proposal in full before the customer decides.

Input parameters:

- `siteId` (string, required)
- `status` (string)

Output parameters:

- `jobs` (array)

### `get_page_job` (~111 tokens)

Read one Foliora proposal in full

One proposed page change: why Foliora proposes it, the brief, the objectives it addresses, the drafted change set with every operation's exact before and after values and its canonical hash, and `fix` — its customer-facing state, reason, live finding statuses, older editions and nextAction. A stale edition is readable history with a null hash; it can never be approved. Read this with the customer before approve_change; never paraphrase the operations as approved text.

Input parameters:

- `jobId` (string, required)

Output parameters:

- `brief` (string)
- `changeSet` (object|null)
- `citationGap` (string)
- `citationObjectives` (array)
- `competingHosts` (array)
- `compile` (object|null)
- `createdAt` (string)
- `findingObjectives` (array)
- `host` (string)
- `impactScore` (number)
- `jobId` (string)
- `rationale` (string)
- `searchObjectives` (array)
- `siteId` (string)
- `status` (string)
- `targetUrl` (string)
- `title` (string)

### `approve_change` (~122 tokens)

Approve a drafted change on the customer's instruction

Approve one drafted change set by its exact canonical hash. Call this only after the customer has read the operations from get_page_job and told you to approve that hash. A stale or mismatched hash is refused. Approval is the customer's only decision: on a site with a connected publisher Foliora publishes and verifies from here on its own (fix.publisherReady true); otherwise the agent applies the exact operations and calls report_publication. Requires OAuth or an API key with the approve scope.

Input parameters:

- `changeSetId` (string, required)
- `expectedHash` (string, required)

Output parameters:

- `approvedAt` (string|null)
- `approvedVia` (string)
- `canonicalHash` (string)
- `changeSetId` (string)
- `status` (string)

### `reject_change` (~57 tokens)

Reject a drafted change on the customer's instruction

Close one drafted change set without approving it. Call this only when the customer says so. The job stays proposed and can be drafted again later. Requires OAuth or an API key with the approve scope.

Input parameters:

- `changeSetId` (string, required)

Output parameters:

- `changeSetId` (string)
- `rejectedVia` (string)
- `status` (string)

### `report_finding_fix` (~95 tokens)

Report a finding as fixed

After the agent fixes a finding on the site (a meta description, a robots rule, llms.txt), mark it fix_reported with a short note. It shows as done on the customer's Fixes list; Foliora's next scheduled read confirms it as resolved or reopens it. The report is never taken on faith. Requires execute access.

Input parameters:

- `findingId` (string, required)
- `note` (string)

Output parameters:

- `findingId` (string)
- `fixReportedAt` (string|null)
- `fixReportedBy` (string|null)
- `status` (string)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ai-foliora-search/www#diagnostics

## Score history

- 2026-09-20: 38
- 2026-09-19: 38
- 2026-09-18: 38
- 2026-09-17: 38
- 2026-09-16: 80
- 2026-09-15: 80
- 2026-09-14: 79
- 2026-09-13: 79
- 2026-09-12: 78
- 2026-09-11: 78
- 2026-09-10: 77
- 2026-09-09: 77
- 2026-09-08: 76
- 2026-09-07: 76
- 2026-09-06: 76
- 2026-09-05: 76
- 2026-09-04: 76
- 2026-09-03: 75
- 2026-09-02: 75
- 2026-09-01: 74
- 2026-08-31: 69
- 2026-08-30: 69
- 2026-08-29: 69
- 2026-08-28: 68
- 2026-08-27: 68

## Common questions

### What is the Foliora Managed AI Search MCP server?

Foliora Managed AI Search is an MCP server listed in the public MCP registry as ai.foliora/search. Foliora MCP for public discovery, account reads, and agent execution of human-approved changes. This page covers its hosted endpoint (https://www.foliora.ai/mcp).

### Is the Foliora Managed AI Search MCP server safe to use?

Foliora Managed AI Search scores 38 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Foliora Managed AI Search MCP server expose?

Foliora Managed AI Search exposes 12 tools: get_product, get_snapshot, create_preview_link, list_sites, get_approved_change, and 7 more. Their descriptions and schemas cost roughly 953 tokens of context every time the server is loaded.

### Does the Foliora Managed AI Search MCP server require authentication?

Yes. Foliora Managed AI Search asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

### Is the Foliora Managed AI Search MCP server still maintained?

Foliora Managed AI Search is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://www.foliora.ai/mcp
- Website: https://www.foliora.ai/
- Changelog RSS feed: https://verifymcp.io/servers/ai-foliora-search/www.xml
- Changelog JSON feed: https://verifymcp.io/servers/ai-foliora-search/www.json
- HTML version of this page: https://verifymcp.io/servers/ai-foliora-search/www