{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:20:43.806Z","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit","markdownUrl":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit.md","server":{"slug":"com-agentsiteaudit-agentsiteaudit","name":"AgentSiteAudit","registryName":"com.agentsiteaudit/agentsiteaudit","description":"Website audits for AI agents: 69 checks with exact fixes, plus verify. 5 free a day, then x402.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"agentsiteaudit","type":"remote","identifier":"https://agentsiteaudit.com/mcp/","withdrawn":false,"url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit","version":"1.2.0","transport":null,"scoredAt":"2026-11-05T02:09:11.879Z"},"score":{"total":74,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":74},{"date":"2026-11-04","total":74},{"date":"2026-11-03","total":73},{"date":"2026-11-02","total":74},{"date":"2026-11-01","total":73},{"date":"2026-10-31","total":73},{"date":"2026-10-30","total":72}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":73,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 643 tokens (~160/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"160","items":"4","tools":"4","tokens":"643","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":20,"verdict":"partial","reasons":["Stability observed for 6 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"6"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"4"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"agentsiteaudit","type":"remote","identifier":"https://agentsiteaudit.com/mcp/","withdrawn":false,"score":74,"current":true,"url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit","markdownUrl":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit.md"}],"facts":[{"label":"Endpoint","value":"https://agentsiteaudit.com/mcp/"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.2.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"audit_site","title":"Audit a web page","description":"Audit one public web page with 69 checks across security, SEO, TLS, performance, transport, accessibility, links, mobile, DNS and agent readiness. Returns the score, grade and the problems found, most important first, each with an exact fix, plus an audit_id to pass to verify_fixes after changes. Passive: only fetches the page and the files it links to. 5 free audits a day; after that it explains the paid API (0.01 USDC per audit via x402).","inputs":[{"name":"url","type":"string","required":true,"description":"Full http or https address of the page to audit, for example https://www.example.co.uk/"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":138},{"name":"verify_fixes","title":"Verify fixes on a web page","description":"Run a fresh audit of the same site and compare it with an earlier audit: lists what was fixed, improved, still failing, worse or new, with the score before and after. Use after making changes suggested by audit_site. Counts as one of the 5 free daily audits.","inputs":[{"name":"previous_audit_id","type":"string","required":true,"description":"The audit_id returned by the earlier audit, like aud_01M6527XCRCB308T391BZGFZ9T. Audits are kept for 30 days."},{"name":"url","type":"string","required":true,"description":"The page to re-audit, on the same site as the earlier audit"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":134},{"name":"customer_reaction","title":"Customer reaction check","description":"Eight AI-simulated customer perspectives read one homepage and report evidence-backed problems that would stop people buying: unclear prices, missing contact details, unexplained policies, weak proof. Each finding has a category, severity, the personas affected, evidence (a word-for-word quote checked against the page, or what is missing), why it matters and a suggested fix. No score. Pass previous_reaction_id to verify fixes: an unchanged page returns the earlier findings without using the free check. 1 free check a day; after that the paid API costs $0.05 via x402. Simulated perspectives, not real customers.","inputs":[{"name":"previous_reaction_id","type":"string","required":false,"description":"Optional: the reaction_id from an earlier check of the same site, to verify fixes. Kept for 30 days."},{"name":"url","type":"string","required":true,"description":"Full http or https address of the homepage, for example https://www.example.co.uk/"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":193},{"name":"list_checks","title":"List the checks","description":"List every check AgentSiteAudit runs: its ID, category, severity and what it looks for, plus the category weights. Free and unlimited.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":37}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T02:09:11.000Z","track":"remote","endpoint":"https://agentsiteaudit.com/mcp/","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=www.agentsiteaudit.com","issuer":"CN=YR1,O=Let's Encrypt,C=US","notBefore":"2026-10-28T09:03:28Z","notAfter":"2027-01-26T09:03:27Z","keyType":"RSA","keyBits":2048,"isCa":false},{"subject":"CN=YR1,O=Let's Encrypt,C=US","issuer":"CN=Root YR,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=Root YR,O=ISRG,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"agentsiteaudit.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"agentsiteaudit.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-30","recent":[{"id":"chg_01a1a451-b624-75d3-998d-5732ca43dd4c","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit#chg-chg_01a1a451-b624-75d3-998d-5732ca43dd4c"},{"id":"chg_01a19f28-6e18-7714-a04d-3f45ba19a4d7","kind":"check.verdict","summary":"Schema quality (pass → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit#chg-chg_01a19f28-6e18-7714-a04d-3f45ba19a4d7"},{"id":"chg_01a19f28-6e19-7407-9609-cacfdfe26646","kind":"tool.added","summary":"New tool “customer_reaction”","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit#chg-chg_01a19f28-6e19-7407-9609-cacfdfe26646"},{"id":"chg_01a19f28-6e19-7c1f-b0e8-507f683a222e","kind":"server.instructions_changed","summary":"The server rewrote its instructions, which are the text every model session reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit#chg-chg_01a19f28-6e19-7c1f-b0e8-507f683a222e"},{"id":"chg_01a19f28-6e1b-70c3-8c8a-d99b29334d58","kind":"score.total_changed","summary":"Trust score (74 → 73)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit#chg-chg_01a19f28-6e1b-70c3-8c8a-d99b29334d58"},{"id":"chg_01a19a01-597a-7d8e-9de9-3496a9e89e3b","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit#chg-chg_01a19a01-597a-7d8e-9de9-3496a9e89e3b"},{"id":"chg_01a18fb2-7db4-7c51-ac45-0e68c6b1e21e","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit#chg-chg_01a18fb2-7db4-7c51-ac45-0e68c6b1e21e"},{"id":"chg_01a18fb2-7db5-7956-bae8-9d85ba54e209","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit#chg-chg_01a18fb2-7db5-7956-bae8-9d85ba54e209"},{"id":"chg_01a18afa-2809-7382-8a78-810a482fd081","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit#chg-chg_01a18afa-2809-7382-8a78-810a482fd081"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit","markdown":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit.md","changelogJson":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit/changelog.json","changelogRss":"https://verifymcp.io/servers/com-agentsiteaudit-agentsiteaudit/agentsiteaudit.xml","external":[{"label":"Remote endpoint","href":"https://agentsiteaudit.com/mcp/"},{"label":"Website","href":"https://agentsiteaudit.com/"}]}}