A sovereign, local-first MCP server for Technical SEO DNS record auditing, SOA health checks, SSL/TLS inspection, and HTTP security header analysis.
Server has 9 tools with basic descriptions and input schemas, but significant quality gaps. Most tool names lack clear action verbs (e.g., 'audit_dns_records' is acceptable, but 'get_live_dns_throughput_metrics' is vague). Descriptions are present but generic (avg ~80 chars, below 194-char baseline). Parameter descriptions are minimal or missing context. Output schemas are not documented, responses are JSON strings without declared structure. No error handling guidance. Tool #7 (calculate_technical_seo_security_score) takes computed inputs rather than performing discovery, violating single-responsibility. Tool #8 (sanitize_audit_payload) is a utility, not a domain tool. No pagination, no result limits documented. Security headers tool returns a score but no actionable remediation guidance.
Technical SEO Tool: Resolves and audits primary A, AAAA, and MX DNS records for any domain.
Security Audit Tool: Evaluates HTTP response headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options).
Scoring Engine: Calculates an aggregate Technical SEO & Security Score (0-100).
SOA Health Tool: Evaluates Start of Authority (SOA) Expire timers and refresh bounds.
TLS Inspector: Inspects SSL certificate expiration dates and issuing CAs.
ANALYTICS: Returns server operational health and performance metrics.
Output schemas not documented. Tools return JSON strings without declared field structure. LLMs cannot plan downstream calls or extract typed data reliably.
Tool #7 (calculate_technical_seo_security_score) violates single-responsibility: it computes a score from pre-computed inputs rather than performing discovery. Should be a utility function, not a tool, or should accept a domain and compute all inputs internally.
No error recovery guidance. Tools return generic error messages (e.g., 'ERROR', 'WARNING') without actionable next steps. LLMs cannot determine if errors are retryable or require user intervention.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 64 | 2026-07-28+ | v2 |
Sanitizes incoming content strings, stripping scripts and malicious tags.
AEO Tool: Audits presence and Markdown structure of /llm.txt for AI crawlers.
Security Tool: Verifies presence and validity of RFC 9116 /.well-known/security.txt file.
Parameter descriptions lack format/constraint details. E.g., 'domain_name' description is 'Target domain name (e.g., seosiri.com)', no mention of valid formats, length limits, or whether subdomains are accepted.
Tool #9 (get_live_dns_throughput_metrics) has vague name and no description. 'get_live_dns_throughput_metrics' does not clearly indicate it returns server health/performance. Description is missing entirely.