io.github.BoxLab-Ltd/yandex-webmaster-mcp

NPM · @BOXLAB/YANDEX-WEBMASTER-MCP · SCANNED AUG 3

Query Yandex Webmaster indexing, queries, diagnostics and backlinks, and recrawl, via an AI agent.

Available components

+34 this week 78 78 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency97

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to BoxLab-Ltd/yandex-webmaster-mcp). View diagnostics → Pass
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 12 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability69

AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 1646 tokens (~164/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @boxlab/yandex-webmaster-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add boxlab-ltd-yandex-webmaster-mcp -- npx -y @boxlab/yandex-webmaster-mcp

# add to Codex CLI

codex mcp add boxlab-ltd-yandex-webmaster-mcp -- npx -y @boxlab/yandex-webmaster-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "boxlab-ltd-yandex-webmaster-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@boxlab/yandex-webmaster-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add boxlab-ltd-yandex-webmaster-mcp --command npx --arg -y --arg @boxlab/yandex-webmaster-mcp

# ~/.hermes/config.yaml

mcp_servers:
  boxlab-ltd-yandex-webmaster-mcp:
    command: "npx"
    args: ["-y", "@boxlab/yandex-webmaster-mcp"]

// mcp.json

{
  "mcpServers": {
    "boxlab-ltd-yandex-webmaster-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@boxlab/yandex-webmaster-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +59
- Install scripts: unverified → pass ▲ security
- Provenance: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- The attested source repository moved: BoxLab-Ltd/yandex-webmaster-mcp security
- Tool coverage: 100 → unverified ▼ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Schema quality: unverified → excellent ▲ functional
- First check of Schema quality: unverified functional
- Licence: MIT functional
31 Jul 26 −25
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
27 Jul 26 44

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@boxlab/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:: BoxLab-Ltd/yandex-webmaster-mcp
Certificate issuer:: https://token.actions.githubusercontent.com
Certificate SAN:: https://github.com/BoxLab-Ltd/yandex-webmaster-mcp/.github/workflows/release.yml@refs/tags/v0.1.1
Rekor log index:: 2212244571
Predicate type:: https://slsa.dev/provenance/v1
Subject digest:: sha512:041c0f1ca9bc5e3ae0836e16a2e26e0cdbc2fab04edf99028d207492373bf24cd6ba283879d1294d9c6e555de8432ff4aa777e72558ccf5c5ec55b78a
Discovery method:: attestation_endpoint

Dependencies 95 packages

95 packages in the resolved dependency tree · 94 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 10 exposed · ~1,646 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

get_diagnostics Site diagnostics ~150

Yandex Webmaster site diagnostics: problems detected on the host (e.g. DNS errors, slow response, robots.txt issues, 4xx alerts), each with a severity (FATAL, CRITICAL, POSSIBLE_PROBLEM, RECOMMENDATION). By default returns only ACTIVE problems (state=PRESENT), worst first. Set includeAbsent=true to also list resolved/absent problem types. Read-only.

Input Output Examples

Name	Type	Req	Description
hostId	string	—	Host id (e.g. "https:example.com:443"). Defaults to YANDEX_WEBMASTER_HOST_ID. List valid ids with get_hosts.
includeAbsent	boolean	—	Also list problem types that are currently absent/resolved. Default false.

No output schema declared.

No examples provided.

get_external_links External links ~159

Inbound (external) links pointing to the host — the backlinks Yandex knows. Read-only. • report="samples" (default): example links with source page, target URL and discovery date, plus the total count available. • report="history": time series of the total external-link count over time.

Input Output Examples

Name	Type	Req	Description
hostId	string	—	Host id (e.g. "https:example.com:443"). Defaults to YANDEX_WEBMASTER_HOST_ID.
limit	integer	—	report="samples": rows to return (1-100). Default 20.
offset	integer	—	report="samples": rows to skip for paging. Default 0.
report	string	—	Which report to return. Default "samples".

No output schema declared.

No examples provided.

get_hosts List Webmaster hosts ~127

Discovery tool: list the sites (hosts) available to your Yandex Webmaster token, each with its host_id, URL and verification state. host_id is what every other tool needs to identify a site. Optionally pass `hostId` to also fetch that host summary (SQI, indexed/excluded page counts, site problems). Read-only. Call this first.

Input Output Examples

Name	Type	Req	Description
hostId	string	—	Optional host id (e.g. "https:example.com:443"). When set, the response also includes that host summary. Defaults to YANDEX_WEBMASTER_HOST_ID if configured.

No output schema declared.

No examples provided.

get_indexing Site indexing ~228

How Yandex crawls and indexes the host. Read-only. Pick a report: • report="history" (default): time series of crawled pages grouped by HTTP status class (HTTP_2XX/3XX/4XX/5XX/OTHER) — spot spikes of errors the crawler hits. • report="crawled": example crawled URLs with their HTTP code and crawl date. • report="in_search": example URLs currently present in Yandex search, with title.

Input Output Examples

Name	Type	Req	Description
dateFrom	string	—	report="history": start date YYYY-MM-DD.
dateTo	string	—	report="history": end date YYYY-MM-DD.
hostId	string	—	Host id (e.g. "https:example.com:443"). Defaults to YANDEX_WEBMASTER_HOST_ID.
limit	integer	—	samples reports: rows to return (1-100). Default 20.
offset	integer	—	samples reports: rows to skip for paging. Default 0.
report	string	—	Which report to return. Default "history".

No output schema declared.

No examples provided.

list_sitemaps List sitemaps ~121

List the Sitemap files Yandex knows for the host, each with its URL, type, last access date, number of URLs and error count, and where it was discovered (robots.txt, webmaster, etc.). Use it to check a sitemap is being read and is error-free. Read-only.

Input Output Examples

Name	Type	Req	Description
hostId	string	—	Host id (e.g. "https:example.com:443"). Defaults to YANDEX_WEBMASTER_HOST_ID.
limit	integer	—	Max sitemaps to return (1-100). Default 100.

No output schema declared.

No examples provided.

Sign in to Yandex from here. Opens your browser to approve access; the code returns automatically over a local redirect, so this usually finishes in one call. If the local port is unavailable it returns a URL to approve and you then call submit_code with the code Yandex shows. Run this once (the token lasts ~1 year); needed before the data tools if you are not signed in yet.

Input Output Examples

Name	Type	Req	Description
oob	boolean	—	Force the copy-paste flow instead of the automatic local redirect.

No output schema declared.

No examples provided.

recrawl_status Recrawl quota & tasks ~156

Read-only view of the host recrawl activity. With no taskId: the remaining daily quota plus the most recent recrawl tasks and their state (IN_PROGRESS, DONE, FAILED). Pass taskId (from recrawl_submit) to check one task. Use before recrawl_submit to confirm quota is available.

Input Output Examples

Name	Type	Req	Description
hostId	string	—	Host id (e.g. "https:example.com:443"). Defaults to YANDEX_WEBMASTER_HOST_ID.
limit	integer	—	Recent tasks to list when no taskId (1-100). Default 10.
taskId	string	—	Check a single recrawl task by its id (from recrawl_submit). Omit to get quota + recent tasks.

No output schema declared.

No examples provided.

recrawl_submit Submit URL for recrawl ~145

Ask Yandex to recrawl a specific page of the host sooner. NOT read-only: each call consumes one unit of the limited daily recrawl quota (check it with recrawl_status). The URL must belong to the host and be a full absolute URL. Returns the task_id and the remaining quota. Track progress with recrawl_status using the returned task_id.

Input Output Examples

Name	Type	Req	Description
hostId	string	—	Host id (e.g. "https:example.com:443"). Defaults to YANDEX_WEBMASTER_HOST_ID.
url	string	yes	Absolute URL of the page to recrawl, e.g. "https://example.com/page/". Must belong to the host.

No output schema declared.

No examples provided.

search_queries Yandex search queries ~402

Search-query analytics for a host from Yandex Search: impressions (TOTAL_SHOWS), clicks (TOTAL_CLICKS), average show/click position. Read-only. • report="top" (default): ranked list of the queries bringing the most traffic, ordered by orderBy. Use this to see which phrases people search. • report="trend": a time series. Pass queryId (from a prior "top" call) for one query's history over time, or omit it for the site's aggregate trend. Tip: cross-reference these queries/landing pages with Yandex Metrica (bounce rate, conversions) to find high-impression, low-conversion phrases worth optimizing.

Input Output Examples

Name	Type	Req	Description
dateFrom	string	—	Start date, YYYY-MM-DD. Default: last week.
dateTo	string	—	End date, YYYY-MM-DD. Default: today.
deviceType	string	—	Device bucket. Default ALL.
hostId	string	—	Host id (e.g. "https:example.com:443"). Defaults to YANDEX_WEBMASTER_HOST_ID. List valid ids with get_hosts.
indicators	array	—	Which indicators to return. Default: all four (TOTAL_SHOWS, TOTAL_CLICKS, AVG_SHOW_POSITION, AVG_CLICK_POSITION).
limit	integer	—	report="top" only: rows to return (1-500). Default 50.
offset	integer	—	report="top" only: rows to skip for paging. Default 0.
orderBy	string	—	report="top" only: rank by TOTAL_SHOWS or TOTAL_CLICKS. Default TOTAL_CLICKS.
queryId	string	—	report="trend" only: return the time series for this specific query (query_id from a prior "top" call). Omit for the aggregate trend.
report	string	—	"top" ranked list (default) or "trend" time series.

No output schema declared.

No examples provided.

submit_code Submit the Yandex sign-in code ~50

Complete a copy-paste sign-in started by login: pass the code Yandex showed you after you approved access.

Input Output Examples

Name	Type	Req	Description
code	string	yes	The code shown on the Yandex page after you approved access.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug