Back to Browse

Seo MCP Server

Developer ToolsModerate6.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Six tools for SEO and AI-readability audits. 91 checks, 11 score modules.

About

Six tools for SEO and AI-readability audits. 91 checks, 11 score modules.

Remote endpoints: streamable-http: https://mcp.metricspot.com/mcp

Security Report

6.2
Moderate6.2Moderate Risk

A well-architected MCP server with proper authentication, input validation, and comprehensive output sanitization. Auth is correctly scoped (anonymous endpoint vs. bearer-token protected endpoints). No malicious patterns, hardcoded secrets, or dangerous operations detected. Minor code quality observations noted but do not materially impact security. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

7 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Your MetricSpot API key (ms_live_...) from app.metricspot.com/settings/api-keys. Required for 5 of the 6 tools; omit to use only run_audit_anonymous (1 audit per IP per 24 hours, no auth).Required

Environment variable: MCP_API_KEY

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

@metricspot/mcp-server

Model Context Protocol server for MetricSpot. Exposes 6 SEO + AI-readability audit tools to AI agents (Claude, ChatGPT, Gemini, Perplexity, Cursor, Zed, OpenClaw, custom bots).

Tools

ToolAuthDescription
run_audit_anonymousnoneOne-shot audit, 1/IP/24h, no Core Web Vitals
run_auditBearer keyFull audit with PSI, returns audit_id
get_auditBearer keyFetch audit + findings by id
list_auditsBearer keyList the user's recent audits (max 100)
get_audit_pdfBearer keySigned URL for the branded PDF report
get_organic_trafficBearer key28-day GA4 + GSC snapshot (if Google linked)

Local install (stdio)

Claude Code (~/.claude/mcp.json):

{
  "mcpServers": {
    "metricspot": {
      "command": "npx",
      "args": ["-y", "@metricspot/mcp-server"],
      "env": {
        "MCP_API_KEY": "ms_live_xxx"
      }
    }
  }
}

Cursor (~/.cursor/mcp.json) and Zed use the same shape.

Omit MCP_API_KEY to only use run_audit_anonymous.

Hosted (Streamable HTTP)

POST https://mcp.metricspot.com/mcp
Authorization: Bearer ms_live_xxx
Content-Type: application/json

{"jsonrpc":"2.0","id":1,"method":"tools/list"}

Env vars

VarDefaultPurpose
PORT3000HTTP listen port
APP_API_BASE_URLhttps://app.metricspot.comMetricSpot app API base (the dev/dev:stdio scripts override it to http://localhost:3000)
APP_PUBLIC_BASE_URLfalls back to APP_API_BASE_URLUsed to build report_url
MCP_INTERNAL_TOKENService-to-service secret forwarded as X-MCP-Internal-Token
MCP_API_KEY(stdio only) User API key, sent as Authorization: Bearer to the HTTP layer

Develop

bun install
bun run typecheck
bun test
bun run dev          # Streamable HTTP on :3000
bun run dev:stdio    # stdio loop (send JSON-RPC on stdin)

Deploy

Multi-stage Dockerfile produces a Bun runtime image. Independent Dokku app on the same Hetzner droplet as app/ and web/.

License

MIT

Reviews

No reviews yet

Be the first to review this server!