MCP server for SEO auditing, research, and analysis. Provides tools for site audits, keyword research, competitor analysis, and search engine optimization with local, evidence-backed reports.
This server has 10 tools with READ_ONLY risk classification, but critical definition gaps severely limit usability. Tool names lack action verbs (e.g., 'llms-txt', 'sitemap', 'robots-txt' are nouns, not verb_noun patterns). Descriptions are present but generic (avg ~80 chars, below the 194-char baseline for A+ tools). Input schemas are minimal: most tools accept only a 'url' or 'target' string with no enum constraints, format specifications, or validation guidance. No output schemas are documented anywhere in the source. Three tools (spam-score, domain-rating, website-traffic) expose 'turnstileToken' as a parameter, a security anti-pattern that leaks secrets into logs. Error handling is absent: no recovery guidance, no categorization of retryable vs. fatal errors. Tool composition is weak: no pagination support, no batch operations, no chaining IDs in responses. The server is STDIO-only, which caps protocol readiness at 50 regardless of definition quality.
Check the domain rating of a website using Ahrefs API
Check if a website has a valid favicon and retrieve favicon information
Generate an LLMs.txt file for a website to improve AI agent discoverability and interaction
Fetch and analyze robots.txt file from a website
Generate a preview of how a page would appear in search engine results
Extract and validate XML sitemaps from a website
Extract URLs and metadata from XML sitemaps
Tool names lack action verbs. 'llms-txt', 'sitemap', 'robots-txt' are nouns; should be 'generate_llms_txt', 'extract_sitemap', 'fetch_robots_txt'. LLMs cannot infer intent from noun-only names.
Credentials exposed as parameters: 'turnstileToken' in spam-score, domain-rating, website-traffic. Tokens in parameters leak into logs and traces. Use server-side secret injection instead.
No output schemas documented. LLMs cannot plan downstream calls or extract fields without knowing response structure. Every tool must document what it returns.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 43 | 2026-07-28+ | v2 |
Validate XML sitemap structure and compliance
Check the spam score of a domain using DataForSEO API
Estimate website traffic for a domain using DataForSEO API
Input schemas are minimal and lack constraints. Most tools accept bare 'url' strings with no format validation, enum constraints, or error guidance. No minimum/maximum bounds on numeric parameters (e.g., locationCode in website-traffic).
No error handling or recovery guidance. Tools provide no actionable error messages, categorization of retryable vs. fatal errors, or suggestions for next steps when calls fail.