siteaudit-mcp 1.1.0

Instant SEO, performance, and security audits for any URL — an MCP server for AI agents

SiteAudit MCP

Instant SEO, Performance, and Security Audits for AI Agents — analyze any URL with a single tool call via the Model Context Protocol (MCP).

SiteAudit is an MCP server that gives Claude Code, Cursor, Windsurf, and any AI agent the ability to audit any website instantly. No API keys, no configuration, no cost. The complete website audit toolkit for AI-powered development.

Use Cases

Here are concrete examples of what you can ask your AI agent once SiteAudit is installed:

• "Audit example.com and give me a prioritized list of SEO fixes" — Full SEO audit with title tags, meta descriptions, headings, structured data, Open Graph, and actionable recommendations
• "Check the security headers on my production site" — HTTPS, HSTS, CSP, X-Frame-Options, cookie flags, SSL certificate validity, and server disclosure
• "Compare my site vs 3 competitors side-by-side" — Multi-site comparison with scores for SEO, performance, and security across all sites
• "Run a Lighthouse audit on my homepage" — Google PageSpeed Insights performance, accessibility, best practices, and SEO scores
• "Find all broken links on my site" — Crawl internal and external links, report 404s, redirects, and unreachable URLs
• "Check if my robots.txt is blocking anything important" — Parse robots.txt rules, find sitemap references, and identify potential crawl issues

Why SiteAudit?

Feature	SiteAudit MCP	Ahrefs	Screaming Frog	Google Lighthouse
Works with Claude Code / Cursor	Yes	No	No	CLI only
No API key needed	Yes	No ($99/mo)	Free (limited)	Yes
SEO + Security + Performance	All three	SEO only	SEO only	Performance only
AI-native (MCP protocol)	Yes	REST API	Desktop app	CLI / API
Broken link checker	Yes	Yes	Yes	No
Lighthouse integration	Yes	No	No	It is Lighthouse
Multi-site comparison	Yes	Manual	Manual	Manual
Free	Yes	$99+/mo	Free (500 URLs)	Yes

Tools (8)

Tool	Description
full_audit	Comprehensive SEO + performance + security audit with unified score (0-100)
seo_audit	SEO analysis: title, meta, headings, images, links, structured data, Open Graph
security_audit	Security headers, HTTPS, HSTS, CSP, SSL certificate check, cookie flags
performance_audit	Response time, page size, compression, caching, redirects
compare_sites	Side-by-side comparison of multiple websites
lighthouse_audit	Google PageSpeed Insights: performance, accessibility, best practices, SEO
check_links	Crawl and validate all links on a page — find broken links, redirects, timeouts
check_robots_txt	Parse and analyze robots.txt rules, directives, and sitemaps

Installation

Claude Code (recommended)

claude mcp add siteaudit -- uvx --from siteaudit-mcp siteaudit

Claude Desktop / Cursor / Windsurf

Add to your MCP configuration (claude_desktop_config.json, .cursor/mcp.json, etc.):

{
  "mcpServers": {
    "siteaudit": {
      "command": "uvx",
      "args": ["--from", "siteaudit-mcp", "siteaudit"]
    }
  }
}

Install via Smithery

npx -y @smithery/cli install @vdalhambra/siteaudit --client claude

Install via MCPize (hosted, no local install)

{
  "mcpServers": {
    "siteaudit": {
      "url": "https://siteaudit-mcp.mcpize.run/mcp"
    }
  }
}

From PyPI

pip install siteaudit-mcp
siteaudit

From source

git clone https://github.com/vdalhambra/siteaudit-mcp.git
cd siteaudit-mcp
uv sync
uv run siteaudit

What it checks

SEO Audit (20+ checks)

• Title tag (presence, length optimization)
• Meta description (presence, length)
• H1 tag (count, content)
• Heading hierarchy (H1-H6)
• Image alt text coverage
• Internal/external link count
• Canonical URL
• Open Graph tags
• Twitter Card tags
• Mobile viewport
• Structured data (JSON-LD)
• Favicon
• Language attribute
• robots meta directives
• Content length (word count)

Security Audit (10+ checks)

• HTTPS enforcement
• HSTS header (with subdomains and preload)
• Content-Security-Policy
• X-Content-Type-Options
• X-Frame-Options
• Referrer-Policy
• Permissions-Policy
• Server/X-Powered-By disclosure
• Cookie security flags (Secure, HttpOnly, SameSite)
• SSL certificate validity and expiration

Performance Audit

• Server response time (ms)
• Page size (KB)
• Compression (gzip/brotli)
• Cache-Control headers
• Redirect chain analysis
• HTTP status code

Lighthouse Audit (via Google PageSpeed Insights)

• Performance score
• Accessibility score
• Best practices score
• SEO score
• Core Web Vitals (FCP, LCP, TBT, CLS)

Example Output

URL: https://github.com
Overall Score: 90/100 (Grade: A)

Scores:
  SEO: 85/100
  Performance: 95/100
  Security: 90/100

Issues: 0
Warnings: 3
  [SEO] No JSON-LD structured data
  [Security] Missing Content-Security-Policy header
  [Security] Server header discloses: 'GitHub.com'

No API Keys Required

SiteAudit works entirely by analyzing the HTML and HTTP headers of the target URL. No third-party API keys needed. It uses:

• requests for HTTP fetching
• BeautifulSoup for HTML parsing
• Python ssl for certificate checking
• Google PageSpeed Insights API (free, no key required for basic usage)

Compatible AI Agents

SiteAudit works with any AI agent or IDE that supports the Model Context Protocol:

• Claude Code (CLI) — claude mcp add
• Claude Desktop — claude_desktop_config.json
• Cursor — .cursor/mcp.json
• Windsurf — MCP settings
• Copilot — MCP configuration
• Any MCP client — stdio or HTTP transport

License

MIT