Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Citable

NPM · CITABLE-MCP · SCANNED SEP 20

SEO and AI-visibility checks agents buy per call — USDC on Solana, no API key.

Available components

+3 this week 75 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security99
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 31 of 150 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency19
  • Repository check failed: the declared repository URL returned HTTP 404. See how to fix → View diagnostics → Fail
  • Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 18 days ago).Pass
  • Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability74
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 3012 tokens (~158/item across 19 items; 19 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management73
  • Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 19 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the Citable MCP server?

Citable runs locally as an npm package, launched with npx -y citable-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · citable-mcp

# add to Claude Code
claude mcp add zaialamm-citable-mcp -- npx -y citable-mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "zaialamm-citable-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "citable-mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "zaialamm-citable-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "citable-mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add zaialamm-citable-mcp -- npx -y citable-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "zaialamm-citable-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "citable-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add zaialamm-citable-mcp --command npx --arg -y --arg citable-mcp
# ~/.hermes/config.yaml
mcp_servers:
  zaialamm-citable-mcp:
    command: "npx"
    args: ["-y", "citable-mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "zaialamm-citable-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "citable-mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add zaialamm-citable-mcp -t stdio -c npx -a -y citable-mcp
// mcp.json
{
  "mcpServers": {
    "zaialamm-citable-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "citable-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 19 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

  • 15 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

  • 13 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

  • 11 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.

  • 9 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

  • 6 Sept 26 +4
    • Stability: unverified → 0.27 functional
  • 30 Aug 26 +15
    • Malware scan: unverified → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/citable-mcp@0.6.3

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 150 packages
Packages resolved 150
Stale 31
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 19 exposed · ~2,767 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
citable_ai_mentions_trend ~146

Paid ($0.18 USDC per call). Stateless prompt tracking: monthly AI mentions and AI search volume for a domain with month-over-month deltas and a direction summary. No tracker to create and nothing to poll — one call returns the whole series. The index starts 2025-08-01. Not charged on failure.

NameTypeReqDescription
domainstringyesDomain to track, e.g. example.com
fromstringStart date yyyy-mm-dd (clamped to 2025-08-01)
platformstringRestrict to one engine (default: both)
tostringEnd date yyyy-mm-dd

No output schema declared.

No examples provided.

citable_ai_share_of_voice ~128

Paid ($0.18 USDC per call, whatever the set size). Compare 2–10 domains inside the AI-answer index: mentions, AI search volume, and each domain's share of the compared set, with per-engine and per-language splits. Share is of the set you asked about, not of the whole index. Not charged on failure.

NameTypeReqDescription
domainsstringyesComma list of 2–10 hostnames, e.g. you.com,rival.com,other.com
platformstringRestrict to one engine (default: both)

No output schema declared.

No examples provided.

citable_ai_visibility ~208

Paid ($0.05 USDC per engine asked; $0.20 for all four). Asks the AI answer engines (Perplexity, Gemini, OpenAI, Claude — whichever the deployment has configured) a prompt through their official APIs and reports which ones cite the domain: `mentioned`, 1-based `position` in each engine's citation list, and the full cited-domain list per engine. One run per engine — answers vary between runs, so call 2–3 times for signal. Not charged if no engine answers.

NameTypeReqDescription
domainstringyesHostname to look for in the citations, e.g. example.com
enginesstringComma list of perplexity,gemini,openai,anthropic (default: all configured)
promptstringyesThe question a buyer would ask, supplied by the user — never invented (citable_cited_prompts returns observed ones), e.g. 'best solana rpc provider'

No output schema declared.

No examples provided.

citable_backlinks ~99

Paid ($0.10 USDC per call). Link profile in one call: total backlinks, referring domains, domain rank, broken links and nofollow share, plus the top referring domains with first-seen dates. The link-prospecting starting point. Not charged on failure.

NameTypeReqDescription
domainstringyesHostname to profile, e.g. example.com
limitintegerReferring domains to return (default 10)

No output schema declared.

No examples provided.

citable_citability_report ~137

Paid ($0.30 USDC per call; $0.43 bought separately). One call bundles the on-page citability audit, AI visibility across all configured engines, and the domain's top AI-cited pages. Answers: can AI read this site, who cites it today, and which pages already work. Not charged on failure.

NameTypeReqDescription
domainstringyesDomain to report on, e.g. example.com
limitintegerTop cited pages to include (default 10)
promptstringyesREQUIRED: the buyer question to ask the engines — supplied by the user, never invented

No output schema declared.

No examples provided.

citable_cited_prompts ~172

Paid ($0.25 USDC per call). The real questions AI answer engines cite a domain for, from an aggregated index of AI answers — question, answer snippet, AI search volume, and the exact URL cited. These are observed prompts, never generated ones, so use this to discover what to track instead of inventing them. Repeated observations of one question are collapsed, with `observations` counting them. Point it at a competitor's domain to get the prompts they win and you do not. Not charged on failure.

NameTypeReqDescription
domainstringyesDomain to look up, e.g. example.com — or a competitor's
limitintegerPrompts to return (default 10)
platformstringRestrict to one engine (default: both)

No output schema declared.

No examples provided.

citable_connect ~166

Free. For people who do not use crypto. Returns a link to open in a browser: sign in at Citable with Google or email, add a few dollars of USDC, click Connect — the agent then pays from that wallet. The link works for 15 minutes; when the user says it is done, call citable_prices to confirm (walletMode becomes sign-in). {status:true} only reports; {reset:true} disconnects and returns to the keypair. The first connect installs Para's SDK under ~/.config/citable/para (about 200 MB, once).

NameTypeReqDescription
resetbooleanForget the sign-in session and pay from the keypair again
statusbooleanOnly report the current state; do not start a new connection

No output schema declared.

No examples provided.

citable_domain_history ~184

Paid ($0.03 USDC per call). How a domain's organic footprint has moved, month by month (up to `months`; the current month may be partial), from the ranking index: keywords ranked, top-10 count, estimated traffic and value, and how many keywords were new, up, down or lost each month, plus a first-to-last trend. The stateless way to track rankings — nothing is stored, the index keeps the history. Monthly resolution; for one keyword's position today use citable_rank_check. Not charged on failure.

NameTypeReqDescription
countrystringCountry code (default us)
domainstringyesHostname to track, e.g. example.com
langstringLanguage code (default en)
monthsintegerCalendar months of history, 2–24 (default 12)

No output schema declared.

No examples provided.

citable_domain_keywords ~138

Paid ($0.04 USDC per call). The keywords a domain actually ranks for — volume, CPC, position, month-over-month movement (previousPosition, change, status) and the ranking URL, highest volume first, with the index's total count. Point it at a competitor for their playbook. Not charged on failure.

NameTypeReqDescription
countrystringCountry code (default us)
domainstringyesHostname to inventory, e.g. example.com — a competitor's works too
langstringLanguage code (default en)
limitintegerKeywords to return (default 25)

No output schema declared.

No examples provided.

citable_domain_overview ~121

Paid ($0.03 USDC per call). One domain's organic footprint from a ranking index: keywords ranked, top-3/top-10 counts, estimated monthly traffic and its ad value, plus the paid-search side. The first call for any domain question; then citable_domain_keywords for what it ranks for. Not charged on failure.

NameTypeReqDescription
countrystringCountry code (default us)
domainstringyesHostname to profile, e.g. example.com
langstringLanguage code (default en)

No output schema declared.

No examples provided.

citable_keyword_ideas ~160

Paid ($0.05 USDC per call). Keyword research: one seed returns up to 100 keywords that contain it, each with search volume, CPC, competition, difficulty and intent, ordered by volume. Full-text matched, so results stay on topic. Use citable_keyword_suggest for the exact phrasings people type (no volume), and citable_keyword_metrics when you already have a shortlist. Not charged on failure.

NameTypeReqDescription
countrystringCountry code (default us)
langstringLanguage code (default en)
limitintegerIdeas to return (default 50)
seedstringyesKeyword to research — a topic, not a domain, e.g. 'seo api'

No output schema declared.

No examples provided.

citable_keyword_metrics ~140

Paid ($0.03 USDC per call, covers the whole batch). Search volume, CPC, competition, keyword difficulty and search intent for 1–20 keywords — licensed clickstream-derived estimates. Answers in request order; unknown keywords return null metrics. Pair with citable_keyword_suggest: expand a seed there, price the shortlist here. Not charged if the metrics feed is unavailable.

NameTypeReqDescription
countrystringCountry code (default us)
keywordsstringyesComma list of 1–20 keywords, e.g. 'solana rpc,best launchpad'
langstringLanguage code (default en)

No output schema declared.

No examples provided.

citable_keyword_research ~162

Paid ($0.06 USDC per call). One seed returns keywords AND questions, merged from public autocomplete and the paid keyword index, with search volume, CPC, difficulty and intent attached. Each row says which sources found it — both is the strongest signal. Cheaper than citable_keyword_ideas plus citable_keyword_metrics separately; reach for those only when you want to control exactly what you pay for. Not charged on failure.

NameTypeReqDescription
countrystringCountry code (default us)
langstringLanguage code (default en)
limitintegerRows per list (default 100)
seedstringyesKeyword to research — a topic, not a domain, e.g. 'reksadana'

No output schema declared.

No examples provided.

citable_keyword_suggest ~211

Paid ($0.005 USDC per call). Expands a seed keyword into autocomplete suggestions, related queries and questions, deduped and ranked across Google, YouTube and Bing. Returns `suggestions[]` and `questions[]` with a 0–1 prominence score, the sources each came from, and whether the keyword still contains the seed.

NameTypeReqDescription
countrystringCountry code (default us)
depthinteger0 seed only · 1 + questions/modifiers · 2 (default) + a–z sweep
langstringLanguage code (default en)
limitintegerMax keywords per list (default 100)
seedstringyesSeed keyword — a topic or phrase people type, e.g. 'solana rpc'. Not a domain: for the keywords a site ranks for use citable_domain_keywords
sourcesstringComma list of google,youtube,bing (default all)

No output schema declared.

No examples provided.

citable_onpage_audit ~138

Paid ($0.01 USDC per call). Fetches one URL and returns a scored on-page audit: title, meta description, canonical, robots, viewport, lang, heading counts and text, word count, internal/external links, image alt coverage, Open Graph, JSON-LD types, HTTP details, and 15 weighted checks with a 0–100 score. Not charged if the page cannot be fetched.

NameTypeReqDescription
urlstringyesAbsolute http(s) URL of one page to audit — not a bare domain; for a domain-level view use citable_domain_overview or citable_citability_report

No output schema declared.

No examples provided.

citable_prices ~79

Free. Lists Citable's SEO endpoints with current per-call USDC prices, plus the wallet that pays: address (the one to fund), walletMode (keypair or sign-in), balanceUsdc and funded. When it is empty, `setup` gives the two ways to fund it — put them to the user. Call this first.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

citable_rank_check ~145

Paid ($0.012 USDC per call). Google organic position of a domain for a keyword via a licensed SERP feed: 1-based `position` (null if outside the checked window), the ranking URL and title, plus the top-10 result list. Not charged if the feed is unavailable.

NameTypeReqDescription
domainstringyesHostname to find, e.g. example.com
glstringCountry code (default us)
hlstringLanguage code (default en)
keywordstringyesSearch query, e.g. 'solana rpc'
numintegerResults window to check (default 20)

No output schema declared.

No examples provided.

citable_serp ~122

Paid ($0.008 USDC per call). The raw Google results page for a keyword: organic results with snippets, plus People-Also-Ask questions and related searches when present. rank-check answers where am I; this answers what the page looks like. Not charged on failure.

NameTypeReqDescription
glstringCountry code (default us)
hlstringLanguage code (default en)
keywordstringyesSearch query — a phrase people type, not a domain
numintegerResults depth (default 10)

No output schema declared.

No examples provided.

citable_top_cited_pages ~111

Paid ($0.22 USDC per call). Which pages of a domain AI engines cite most, from an aggregated index of AI answers — per-page mentions, AI search volume, per-engine and per-language splits, plus domain totals. Answers 'what already works on this site — write more of that'. Not charged if the index is unavailable.

NameTypeReqDescription
domainstringyesDomain to inventory, e.g. example.com
limitintegerPages to return (default 10)

No output schema declared.

No examples provided.

Common questions

What is the Citable MCP server?

Citable is an MCP server listed in the public MCP registry as io.github.zaialamm/citable-mcp. SEO and AI-visibility checks agents buy per call, USDC on Solana, no API key. This page covers its npm package (citable-mcp).

Is the Citable MCP server safe to use?

Citable scores 75 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Citable MCP server expose?

Citable exposes 19 tools: citable_prices, citable_connect, citable_keyword_suggest, citable_onpage_audit, citable_ai_visibility, and 14 more. Their descriptions and schemas cost roughly 2,767 tokens of context every time the server is loaded.

Is the Citable MCP server still maintained?

Citable is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Citable MCP server under?

Citable declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.