CueScout
REMOTE · MCP.CUESCOUT.COM
Check if ChatGPT or Perplexity names a brand for a buying question, and if AI bots can read a site.
Available components
Last scanned (17 hours ago)
Scores higher than 68% of remote servers
Reachable. Last reached 17 Oct 2026.
Category Marketing and SEO
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security74
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability87
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 1705 tokens (~94/item across 18 items; 14 tools + 4 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 96% of tool parameters carry a description.Partial
- Structured output schemas are declared (21% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 14 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 16 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 17 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Oct 26 0
- Tool “check_ai_readiness” rewrote its description, which is the text the model reads security
- Tool “get_prompt_answers” rewrote its description, which is the text the model reads security
- Tool “get_site_audit” rewrote its description, which is the text the model reads security
- Tool “get_todo” rewrote its description, which is the text the model reads security
- 15 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 14 Oct 26 73
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 17 Oct 2026 · Probed https://mcp.cuescout.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.cuescout.com | CN=YE2,O=Let's Encrypt,C=US | 30 Sept 2026 | 29 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 683540d8bcc00b7115e9111d0f8e39d6536 |
| SANs: mcp.cuescout.com | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.cuescout.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| cuescout.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.cuescout.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.cuescout.com/mcp | HTTPS enforced | 308 | https://mcp.cuescout.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_ai_crawler_access Check whether AI crawlers are blocked in robots.txt ~102
Use this when someone asks why their site never shows up in AI answers, or whether GPTBot, ClaudeBot, PerplexityBot or Google-Extended can crawl it. Reads the site's robots.txt and reports which of those crawlers are blocked, including by a blanket rule the owner may not have meant. One fetch, no AI.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The site or page URL to check. A bare domain like example.com is fine. |
No output schema declared.
No examples provided.
check_ai_readiness Check whether AI engines can read a site ~121
Use this when someone asks whether AI engines can read, crawl or quote their website, or wants an AI-readiness audit of a site. Runs eight checks: AI crawler access in robots.txt, llms.txt, Organization and FAQ schema, canonical and meta tags, server-rendered copy, and whether an about page and a pricing page exist. It does not measure whether any engine actually cites the site. No AI call, nothing stored.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The site or page URL to check. A bare domain like example.com is fine. |
No output schema declared.
No examples provided.
check_ai_visibility Check whether an AI engine recommends a brand ~222
Use this when someone asks whether an AI answer engine names or cites a brand for a buying question, or which other brands it names. Sends one question to one search-grounded engine through its API and returns whether the brand was named, whether its domain was cited, which of the listed competitors were named, and the pages the answer cited. Each call is a fresh API request with no account history or personalization, and one question is one datapoint, not an overall visibility score.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | yes | The brand or product name to look for in the answer. |
| competitors | array | – | Up to 3 competitor names to check for in the same answer. |
| domain | string | – | The brand's domain. Supplying it enables citation detection, not just name matching. |
| engine | string | – | Which engine answers: perplexity (the default) or chatgpt. |
| question | string | yes | A question a buyer would actually type, e.g. "best tool for tracking AI search visibility". Not a keyword: the engines answer questions. |
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | yes | – |
| cited | boolean | yes | – |
| competitors | array | yes | – |
| engine | string | yes | – |
| mentioned | boolean | yes | – |
| question | string | yes | – |
| rank | number|null | yes | – |
| sentiment | string|null | yes | – |
| snippet | string|null | yes | – |
| sources | array | yes | – |
No examples provided.
check_sitemap Check whether a crawler gets a usable page list ~79
Use this when someone wants their XML sitemap checked. Reports whether a site's sitemap is reachable, parses, is declared in robots.txt, and is free of cross-host entries a crawler discards. A handful of fetches, no AI.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The site or page URL to check. A bare domain like example.com is fine. |
No output schema declared.
No examples provided.
get_ai_visibility Show AI visibility for a tracked brand ~152
Use this when someone asks how visible their brand is in AI answers, what their share of AI voice is, or how they compare with competitors. Reads the results CueScout already collected for the brand: how often AI answers named it, its share of voice, how often its site was cited, and the same for each competitor, over the last 7, 28 or 90 days. It does not run new checks.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | – | Which brand, by name or id, when the account tracks more than one. Leave empty to use the only brand; list_brands shows them all. |
| days | number | – | The window to report on, in days. Defaults to 28. |
| Name | Type | Req | Description |
|---|---|---|---|
| answers | number | yes | – |
| app_url | string | yes | – |
| brand | string | yes | – |
| brand_id | string | yes | – |
| days | number | yes | – |
| engines | array | yes | – |
| low_sample | boolean | yes | – |
| questions | number | yes | – |
| rankings | array | yes | – |
No examples provided.
get_profile Show the connected CueScout account ~27
Use this when someone asks which CueScout account is connected. Returns the account name and email.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| string | – | – | |
| id | string | yes | – |
| name | string | – | – |
No examples provided.
get_prompt_answers Show the latest AI answers to one tracked prompt ~111
Use this when someone wants to read what the AI engines actually answered to one of their tracked prompts. Returns the most recent answer from each engine, whether the brand was named or cited, which brands were named, and the pages each answer cited.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | – | Which brand, by name or id, when the account tracks more than one. Leave empty to use the only brand; list_brands shows them all. |
| prompt_id | string | yes | The prompt id, from list_prompts. |
No output schema declared.
No examples provided.
get_site_audit Show the brand's site audit ~109
Use this when someone asks whether AI engines can read their own brand's site, based on CueScout's last audit of it: crawler access, llms.txt, schema, meta tags, server-rendered copy, and about and pricing pages. Reads the stored result; it does not re-run the audit.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | – | Which brand, by name or id, when the account tracks more than one. Leave empty to use the only brand; list_brands shows them all. |
No output schema declared.
No examples provided.
get_todo Show one To-do with its steps and evidence ~91
Use this when someone wants the details of one To-do: why it matters, the steps to do it, and the evidence behind it.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | – | Which brand, by name or id, when the account tracks more than one. Leave empty to use the only brand; list_brands shows them all. |
| todo_id | string | yes | The To-do id, from list_todos. |
No output schema declared.
No examples provided.
list_brands List the brands in the CueScout account ~42
Use this to see which brands the connected CueScout account tracks, with their sites and the competitors set for each. The other account tools take one of these brands.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_citation_sources List the pages AI answers cite for a brand ~144
Use this when someone asks which websites or pages AI answers rely on in their brand's category, or where they should try to get mentioned. Returns the pages cited most often across the brand's tracked prompts, with how many times each was cited, by which engines, and which brands each page names.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | – | Which brand, by name or id, when the account tracks more than one. Leave empty to use the only brand; list_brands shows them all. |
| days | number | – | The window to report on, in days. Defaults to 28. |
| limit | integer | – | How many pages to return. Defaults to 15. |
No output schema declared.
No examples provided.
list_prompts List the tracked prompts and how each engine answered ~132
Use this when someone asks which questions CueScout tracks for their brand, which ones the brand is missing from, or who gets named instead. Returns each tracked prompt with the latest verdict per engine (named and cited, named, or not named), the brand's mention and citation rate over the window, and the brands named instead.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | – | Which brand, by name or id, when the account tracks more than one. Leave empty to use the only brand; list_brands shows them all. |
| days | number | – | The window to report on, in days. Defaults to 28. |
No output schema declared.
No examples provided.
list_todos List the brand's To-dos ~108
Use this when someone asks what they should do next to show up in AI answers. Returns CueScout's To-dos for the brand in priority order: the action, why it matters and its priority. Filter by status: todo (default), suggested, done or dismissed.
| Name | Type | Req | Description |
|---|---|---|---|
| brand | string | – | Which brand, by name or id, when the account tracks more than one. Leave empty to use the only brand; list_brands shows them all. |
| status | string | – | – |
No output schema declared.
No examples provided.
validate_structured_data Validate the JSON-LD on a page ~96
Use this when someone wants their schema markup or JSON-LD checked on a specific page. Reports which schema types the page declares, which blocks fail to parse, and whether the fields that help an engine attribute a claim (sameAs, Organization identity, FAQ answers) are filled in. One fetch, no AI.
| Name | Type | Req | Description |
|---|---|---|---|
| url | string | yes | The site or page URL to check. A bare domain like example.com is fine. |
No output schema declared.
No examples provided.
How do I install the CueScout MCP server?
CueScout is a hosted endpoint at https://mcp.cuescout.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.cuescout.com
claude mcp add --transport http telman03-cuescout 'https://mcp.cuescout.com/mcp'
What is the CueScout MCP server?
CueScout is an MCP server listed in the public MCP registry as io.github.telman03/cuescout. Check if ChatGPT or Perplexity names a brand for a buying question, and if AI bots can read a site. This page covers its hosted endpoint (https://mcp.cuescout.com/mcp).
Is the CueScout MCP server safe to use?
CueScout scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the CueScout MCP server expose?
CueScout exposes 14 tools: check_ai_visibility, check_ai_readiness, check_ai_crawler_access, validate_structured_data, check_sitemap, and 9 more. Their descriptions and schemas cost roughly 1,536 tokens of context every time the server is loaded.
Does the CueScout MCP server require authentication?
No. We connected to CueScout without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the CueScout MCP server still maintained?
CueScout is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.