{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T21:49:13.186Z","url":"https://verifymcp.io/servers/com-krawlup-krawlup/api","markdownUrl":"https://verifymcp.io/servers/com-krawlup-krawlup/api.md","server":{"slug":"com-krawlup-krawlup","name":"Krawlup","registryName":"com.krawlup/krawlup","description":"SEO/AEO audits agents fix directly, free site reports, first-party cookieless analytics — via MCP.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api","type":"remote","identifier":"https://api.krawlup.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-krawlup-krawlup/api","version":"2.0.0","transport":null,"scoredAt":"2026-11-05T01:25:50.458Z"},"score":{"total":78,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":78},{"date":"2026-11-04","total":77}]},"categories":[{"name":"Endpoint Security","score":89,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC.","The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.rfc9728_invoke","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}},{"code":"auth.registration_dcr_only","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":77,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 2572 tokens (~98/item across 26 items; 26 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"98","items":"26","tools":"26","tokens":"2572","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":3,"verdict":"partial","reasons":["Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"1"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.","An AI judge read all 26 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_declared","args":{"pct":"100","annotated":"2","destructive":"2"}},{"code":"toolsafety.manipulation_clean","args":{"units":"26","judged":"26"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"api","type":"remote","identifier":"https://api.krawlup.com/mcp","withdrawn":false,"score":78,"current":true,"url":"https://verifymcp.io/servers/com-krawlup-krawlup/api","markdownUrl":"https://verifymcp.io/servers/com-krawlup-krawlup/api.md"}],"facts":[{"label":"Endpoint","value":"https://api.krawlup.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"required"},{"label":"Version","value":"2.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"search_products","title":null,"description":"Search the public catalog of launched products in plain language (min 2 characters).","inputs":[{"name":"limit","type":"integer","required":false,"description":"How many results (default 20, max 50)"},{"name":"query","type":"string","required":true,"description":"What to search for: product names, taglines, descriptions, domains"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":63},{"name":"get_product","title":null,"description":"The full public listing for one product, by slug or key.","inputs":[{"name":"identifier","type":"string","required":true,"description":"The product slug (e.g. \"acme-app\") or key (its domain)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":45},{"name":"check_launch_readiness","title":null,"description":"Audit a URL before adding it to krawlup: bans, blocked platforms, whether the product already exists (and who owns it), plus the optional category list. Run this before add_product.","inputs":[{"name":"url","type":"string","required":true,"description":"The product website URL"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":60},{"name":"get_site_report","title":null,"description":"The free public site report for any website (the /site-report tool): performance, AEO, CRO, SEO crawl, CrUX, OpenPageRank, scorecards and the named checks behind them — the same data the public site-report page renders. Cached read, never generates; if hasReport is false, call run_site_report and poll this tool until scanStage clears.","inputs":[{"name":"domain","type":"string","required":true,"description":"The website domain, e.g. \"example.com\""}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":102},{"name":"run_site_report","title":null,"description":"Start the free public scan for any website and return immediately. Authenticated agents get 2 full scans per calendar month per credential; anonymous callers share a per-IP monthly budget with every other surface. Poll get_site_report for the domain until scanStage clears to read the finished report. Domains already listed as krawlup products are refused — scan those from the dashboard.","inputs":[{"name":"domain","type":"string","required":true,"description":"The website domain, e.g. \"example.com\""}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":99},{"name":"list_products","title":null,"description":"List your products on krawlup with their latest scan scores","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":21},{"name":"get_my_products_status","title":null,"description":"Your products with their directory visibility (public/private) — most recent first.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":25},{"name":"compare_products","title":null,"description":"All your products side by side — lifetime or windowed (today / 7d / 30d / 90d) unique visitors, views, revenue totals with refunds netted, average revenue per conversion, revenue per visitor, and scan scores, sorted by any of them. Windowed numbers are computed exactly the way the dashboard computes them (same events, same windows), so they match the product page; lifetime visitors are the leaderboard's HLL estimate (~1.6%) and lifetime revenue comes from the payments ledger. Products and scores are always included; visitor columns and windowed revenue need the website_analytics subscription facility, revenue columns need analytics_conversion — gated columns come back null with a note instead of failing the call.","inputs":[{"name":"limit","type":"integer","required":false,"description":"Max products returned. Default 50."},{"name":"order","type":"string","required":false,"description":"Sort direction. Default: desc (biggest / newest first)."},{"name":"range","type":"string","required":false,"description":"Metric window. lifetime = all-time totals; the others are ROLLING windows over the last N UTC days ending today (each includes today so far) — like the dashboard, they are not calendar-day buckets."},{"name":"sortBy","type":"string","required":false,"description":"Column to sort by. Products missing the chosen metric sort last. Default: visitors."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":261},{"name":"get_my_subscription","title":null,"description":"The founder's current subscription: plan name and price, status (active / trial / in the 3-day renewal grace / expired read-only), the plan's abilities and limits (a limit of 0 means unlimited), usage against this period's meters, and a can-do summary. Call this FIRST to check which features the founder's plan actually allows before using any other tool.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":85},{"name":"add_product","title":null,"description":"Add a product from just its URL: krawlup scrapes the site (name, tagline, description, icons) and adds it to the founder's dashboard. Every other field is optional — explicit values override the scrape. Adding NEVER publishes — the product is private until the founder (or set_product_public) publishes it. Requires the submit permission.","inputs":[{"name":"categories","type":"array","required":false,"description":"Up to three category ids (or slugs/names) from check_launch_readiness. Optional — the founder can tag the product later."},{"name":"description","type":"string","required":false,"description":"Short description (max 600 characters). Omit to use the scraped description."},{"name":"name","type":"string","required":false,"description":"Product name (max 40 characters). Omit to use the scraped site title."},{"name":"tagline","type":"string","required":false,"description":"One-line tagline (max 120 characters). Omit to use the scraped site description."},{"name":"twitterUsername","type":"string","required":false,"description":"The product's X/Twitter handle (bare handle or profile URL)"},{"name":"url","type":"string","required":true,"description":"The product website URL"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":213},{"name":"set_product_public","title":null,"description":"Make one of your products public in the krawlup directory. Publishing requires an active paid subscription (no trial) OR an admin-approved publishing grant covering this exact product; the 403 message names which. Unpublishing is set_product_private. Requires the submit permission.","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (domain) as returned by add_product or list_products"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":85},{"name":"set_product_private","title":null,"description":"Remove one of your products from the public directory (always allowed, any plan).","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (domain) as returned by add_product or list_products"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":47},{"name":"get_insights","title":null,"description":"Full latest insights for one product — everything the dashboard renders: overall + per-plane scorecards, failing audits, Core Web Vitals metrics, conversion (CRO) checks, the mobile layout test, AI-readiness facts (llms.txt, AI-crawler robots, structured data), trust/security checks, CrUX field data, Domain Rating + OpenPageRank, the SEO crawl, the recommended First Edit, and unresolved AI fix cards (fix cards require the ai_fix_cards plan facility)","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":122},{"name":"get_fix_cards","title":null,"description":"All stored AI fix cards for one product (what/why/steps/agent prompt per issue). Requires a plan with the ai_fix_cards facility","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":54},{"name":"get_scan_history","title":null,"description":"Score-over-time series for one product (last 100 scans, chronological): performance, AEO, CRO, SEO crawl, scorecards, CrUX, openRank, and issue counts — plus per-run source and timestamp","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":69},{"name":"get_analytics_snippet","title":null,"description":"The exact <script> tag that installs krawlup first-party analytics on a product's own website (visitors, sessions, pages, referrers, countries, conversion goals). The returned snippet already embeds the site token at data-site=\"…\" — insert BOTH lines yourself; never ask the founder to paste the token. After installing, confirm data appears in the dashboard Website tab within a minute of the first visit","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":110},{"name":"get_analytics_token","title":null,"description":"The raw analytics site token for one product — the data-site value inside the krawlup analytics tag. The token is not a secret (it travels in the tagged page source by design) and is already embedded inside the snippet returned by get_analytics_snippet — never ask the founder to paste the token. Use this for hand-written tags, the @krawlup/analytics-tag npm package, or custom integrations","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":109},{"name":"set_excluded_pages","title":null,"description":"Replace the per-product Excluded pages board — paths whose visits are discarded at intake (never stored, never counted). DESTRUCTIVE: it changes what the site's analytics records. MCP clients should prompt the site owner before calling; regardless, set confirm=true ONLY after the owner explicitly approved the exact list in the conversation. An empty array removes all exclusions. Requires a key with the submit scope","inputs":[{"name":"confirm","type":"boolean","required":true,"description":"Must be true, and may only be true after the site owner approved this exact list in the conversation"},{"name":"paths","type":"array","required":true,"description":"FULL replacement list of absolute paths (e.g. /admin also covers /admin/settings; max 25) — an empty array clears the board"},{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":166},{"name":"get_website_analytics","title":null,"description":"First-party website analytics for one product: visitors, sessions, bounce, avg. duration, pages per session, pageviews, daily series, entry/exit pages, top pages/referrers, acquisition channels, UTM sources, countries/devices, AI crawler visits (AI answers / indexing / training, with a partial flag when a crawler query failed), and conversion events + goals when the plan carries the analytics_conversion facility","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"},{"name":"range","type":"string","required":false,"description":"Defaults to 7d"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":123},{"name":"get_bottleneck","title":null,"description":"The stored AI bottleneck analysis for one product (THE one edit to make, with why/impact/steps and the agent prompt), or null if not run yet","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":59},{"name":"get_keyword_ideas","title":null,"description":"The stored keyword research for one product: intent-clustered keyword ideas with volume/difficulty estimates (exact volume + CPC when a Keywords Everywhere key is configured), prioritized content actions, and a per-keyword verdict (own/push/hard/skip). A new run can be triggered from here with run_keyword_research; ideas worth watching can be added to rank tracking with add_tracked_keywords. Requires a plan with the keyword_research facility","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":115},{"name":"run_keyword_research","title":null,"description":"Runs one keyword research for a product: a Google-autocomplete sweep clustered by a model into intent groups with volume/difficulty estimates and prioritized content actions (Jev-scored fit/demand/competition when the TypeSafe key is bound). Spends one of the founder's monthly keyword-research runs — check first with get_keyword_ideas whether the stored research still serves. Requires a key with the rescan scope","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"},{"name":"seed","type":"string","required":false,"description":"Seed keyword; defaults to the product's target keyword or name"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":127},{"name":"add_tracked_keywords","title":null,"description":"Adds keywords to a product's rank-tracking board (max KEYWORD_TRACK_CAP per product). Tracked keywords are re-checked by the scanner on its scan passes and their top-10 positions become the rank history get_keyword_ranks reads. Requires a key with the rescan scope","inputs":[{"name":"keywords","type":"array","required":true,"description":"The keywords to track — normalized (trimmed, lowercased, deduped) before storage"},{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":110},{"name":"remove_tracked_keywords","title":null,"description":"Removes keywords from a product's rank-tracking board. Their stored rank-check history is deleted with them. Requires a key with the rescan scope","inputs":[{"name":"keywords","type":"array","required":true,"description":"The keywords to stop tracking"},{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":67},{"name":"get_keyword_ranks","title":null,"description":"Rank history for a product's tracked keywords, as checked by the scanner on its scan passes: per keyword the latest position (null = checked and not in the top-10), best position, and the series of stored checks. Only positions actually checked are returned — never interpolated. searchConfigured=false means no SERP source (Treg/Tavily) is configured and the scanner skips checks, so the board stays empty until the admin configures one. Requires a plan with the keyword_research facility","inputs":[{"name":"keyword","type":"string","required":false,"description":"Limit to one tracked keyword"},{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":139},{"name":"trigger_rescan","title":null,"description":"Starts a fresh full analysis of one product in the background — spends one of the founder's full-analysis allowances for the current billing period (per product, and across all their products), plus one page speed check. Returns immediately; poll get_insights for this product until scanPending is false to read the fresh numbers. Requires a key with the rescan scope.","inputs":[{"name":"productKey","type":"string","required":true,"description":"The product key (see list_products)"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":96}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T01:25:50.000Z","track":"remote","endpoint":"https://api.krawlup.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=api.krawlup.com","issuer":"CN=YR2,O=Let's Encrypt,C=US","notBefore":"2026-10-19T14:54:42Z","notAfter":"2027-01-17T14:54:41Z","keyType":"RSA","keyBits":4096,"isCa":false},{"subject":"CN=YR2,O=Let's Encrypt,C=US","issuer":"CN=Root YR,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"RSA","keyBits":2048,"isCa":true},{"subject":"CN=Root YR,O=ISRG,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"RSA","keyBits":4096,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"api.krawlup.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"krawlup.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"enforced_validated","label":"Enforced and verified","gate":"invoke","gateLabel":"On tool calls","status":200,"authorizationServers":["https://api.krawlup.com"]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":302},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-11-04","recent":[{"id":"chg_01a1a94f-ef0b-7708-b7f4-de8744cbe371","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-krawlup-krawlup/api#chg-chg_01a1a94f-ef0b-7708-b7f4-de8744cbe371"},{"id":"chg_01a1a94f-ef0c-7663-8e74-00a5823fb927","kind":"tool.description_changed","summary":"Tool “get_website_analytics” rewrote its description, which is the text the model reads","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-krawlup-krawlup/api#chg-chg_01a1a94f-ef0c-7663-8e74-00a5823fb927"},{"id":"chg_01a1a94f-ef0d-733e-a545-27b57bf179f5","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/com-krawlup-krawlup/api#chg-chg_01a1a94f-ef0d-733e-a545-27b57bf179f5"},{"id":"chg_01a1a4ce-0f17-743e-b604-c632cc1d5979","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-krawlup-krawlup/api#chg-chg_01a1a4ce-0f17-743e-b604-c632cc1d5979"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-krawlup-krawlup/api/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-krawlup-krawlup/api","markdown":"https://verifymcp.io/servers/com-krawlup-krawlup/api.md","changelogJson":"https://verifymcp.io/servers/com-krawlup-krawlup/api/changelog.json","changelogRss":"https://verifymcp.io/servers/com-krawlup-krawlup/api.xml","external":[{"label":"Remote endpoint","href":"https://api.krawlup.com/mcp"}]}}