@checkvibe/mcp-server

MCP (Model Context Protocol) server for CheckVibe. Run automated security audits, technical SEO audits, and AEO (AI answer-engine visibility) audits on any web application directly from your AI coding agent.

Setup

1. Get an API key

Create an API key at checkvibe.dev/dashboard/api-keys.

2. Add to your AI coding agent

Claude Code — one command in your project directory (passes the key via -e):

claude mcp add checkvibe -e CHECKVIBE_API_KEY=cvd_live_... -- npx -y @checkvibe/mcp-server

Cursor — add to .cursor/mcp.json:

{
  "mcpServers": {
    "checkvibe": {
      "command": "npx",
      "args": ["-y", "@checkvibe/mcp-server"],
      "env": {
        "CHECKVIBE_API_KEY": "cvd_live_..."
      }
    }
  }
}

One-click install (paste your API key when prompted for the cvd_live_... placeholder):

Add to Cursor · Add to VS Code

MCP Registry

Listed in the official MCP Registry as io.github.YvesMatteo/checkvibe — registry-aware clients can discover and install it by that name.

Tools

| Tool | Description | Required Scope | |------|-------------|----------------| | run_scan | Run a full audit on a URL — every pillar at once (Security, SEO, AEO, Performance, Domain, Email, Compliance, Accessibility). Auto-detects or creates a project so scans use saved credentials and appear in project history. Pass categories to scope it to specific pillars. | scan:write + project:read + project:write | | run_seo_aeo_scan | Run a focused SEO + AEO (AI visibility) audit: ~70 technical SEO checks + ~45 AI-visibility checks with per-engine reachability (ChatGPT, Claude, Perplexity, Google AI, Copilot) and concrete fixes. Much lighter than a full security scan. | scan:write | | run_accessibility_scan | Run an Accessibility (WCAG / EAA) audit: structure, forms, media, contrast, navigation, motion — each issue with a concrete fix. | scan:write | | run_email_scan | Run an Email Deliverability audit: SPF, DKIM, DMARC, MX, BIMI, MTA-STS, DNSSEC. | scan:write | | run_performance_scan | Run a Performance audit: page weight, render-blocking resources, caching, compression, image optimization, Core Web Vitals. | scan:write | | run_domain_scan | Run a Domain Health audit: registration & expiry, DNS, nameservers, TLS certificate, CAA, registrar lock. | scan:write | | run_compliance_scan | Run a Compliance & Privacy audit: cookie consent, tracker disclosure, privacy policy, GDPR/CCPA signals. | scan:write | | get_visibility_results | Read the SEO/AEO check-level results stored in a previous scan. | scan:read | | get_audit_results | Read a pillar's full check-level results from a previous scan (accessibility, performance, domain, email, compliance, or seo). | scan:read | | get_scan_results | Get detailed results for a specific scan by ID. | scan:read | | export_scan | Export a finished scan as a Markdown report (security, all, seo, performance, domain, email, compliance, or accessibility). Paid plan. | scan:read | | verify_fix | Re-run a single scanner against an existing scan to confirm a fix, without burning a full scan slot. Paid plan. | scan:write | | list_scans | List recent scans with status and scores. Supports limit, status, offset (pagination). | scan:read | | delete_scan | Permanently delete a scan and its results. | scan:write | | list_projects | List all projects with scores and monitoring status. | project:read | | get_project | Get project configuration details. | project:read | | update_project | Update project settings (name, URL, backend, email). | project:write | | delete_project | Permanently delete a project and all its scans, dismissals, and monitoring. | project:write | | get_monitoring | Get a project's recurring-scan schedule and alert rules. Paid plan (Pro/Max). | project:read | | set_monitoring_schedule | Create/update a project's recurring-scan schedule (frequency, time). Paid plan (Pro/Max). | project:write | | set_alert_rule | Create/update an alert rule (score drop, new critical, score below threshold). Paid plan (Pro/Max). | project:write | | dismiss_finding | Dismiss a finding with a reason. Supports scope: project (default), scan, or global (all projects). | dismissal:write | | list_dismissals | List dismissed findings for a project. Supports limit, offset (pagination). | dismissal:read | | restore_finding | Un-dismiss a finding (restore to active). | dismissal:write |

Environment Variables

| Variable | Required | Description | |----------|----------|-------------| | CHECKVIBE_API_KEY | Yes | Your CheckVibe API key (cvd_live_...) | | CHECKVIBE_BASE_URL | No | API base URL (default: https://checkvibe.dev) |

License

MIT