EU cookie-consent & tracker audit, run like a real first-time visitor (EU proxies). Free quick check, no account. Finds trackers and tracking cookies before consent, missing first-layer Reject, what still fires after Reject, Google Consent Mode v2 state per signal, plus Google Fonts/YouTube/Maps/reCAPTCHA. Every finding comes with the exact request as evidence and a concrete fix, in 13 languages. Weekly monitoring, white-label PDF for agencies, private share links. Works with any CMP (Cookiebot, Usercentrics, Complianz, CookieYes, Borlabs…).
Scored across 18 tools
Most tools target a clearly distinct resource+action (add_domain, list_domains, compare_scans, get_evidence, get_report_link). The main overlap is the family of site-checking tools — quick_check vs scan_domain vs audit_domain vs audit_domains — plus three separate status tools (get_scan_status, get_audits_status, get_quick_check_result); descriptions do disambiguate them, but only after careful reading (free vs monitored vs non-monitored, credit cost, confirm flag).
Nearly everything is snake_case with a predictable verb_noun or noun_verb shape (add_domain, list_domains, scan_domain, get_findings, compare_scans). Minor deviations: account_info is noun-only, quick_check has no verb, and the get_ prefix is applied to some retrievals but not others (scan_history, account_info).
18 tools is on the heavy side for a single-domain auditing service. Several are near-duplicates that could be consolidated (three job-status tools, quick_check/scan_domain/audit_domain/audit_domains), though the extras (get_capabilities, get_upgrade_link, explain_finding) are justified support tools.
The create/read/scan/report lifecycle is well covered with strong depth (findings, evidence pack, report links, history, comparison, plan/credit purchase). However there is no remove_domain or any way to change/delete a monitored domain, and no listing of past audits — an agent hits a dead end for lifecycle cleanup and audit history.
Shows the connected Bannerproof account: plan, how many monitored domains it allows and uses, and the remaining audit credits.
Inputs: no named parameters.
Adds a domain to weekly monitoring in the connected account (within the plan's domain limit) and runs its first scan. Requires a plan with a free domain slot; otherwise it returns an error that names the plan needed.
Inputs: domain (required), language.
Full audit of any website (for example a client's or a prospect's site) that is NOT monitored in the account. Spends 1 audit credit, so it is marked destructive and runs only with confirm=true. If the same site was audited in the last 24 hours, the earlier result is returned without spending a credit unless force_new=true. If the site can't be scanned, the credit is returned automatically.
Inputs: domain (required), confirm (required), language, force_new.
Audits up to 10 websites at once (e.g. an agency's client list or prospects). Spends 1 audit credit per new audit and runs only with confirm=true; sites audited in the last 24 hours are reused without spending. If the account doesn't have enough credits for the whole list, nothing starts (no partial batch). A site that can't be scanned (down, blocking bots, too slow) is not charged — its credit is returned automatically. Returns a job_id per site — follow up with get_audits_status for all of them, then get_findings per domain.
Inputs: confirm (required), domains (required).
Compares the latest scan of a monitored domain with the previous one (or with the newest scan on or before a given date): new issues, resolved issues, score change, banner and reject option changes. Use it to confirm a fix worked or to see what a site update broke.
Inputs: domain (required), compare_with_date.
Explains one finding in plain language: what it is, why it is a problem, how to fix it and which rule it relates to. Pass the tracker name exactly as get_findings returned it. Free, no account needed.
Inputs: tracker (required), status, language.
Status of several audits at once (e.g. the job_ids audit_domains returned): which are done with their score and issue count, which are still running, and which failed — with the reason. Failed scans are not charged: their audit credit goes back to the account automatically.
Inputs: job_ids (required).
Describes what Bannerproof checks, what each tool does, what needs an account and what it costs. Call this first when the user asks what this server can do or which tool to use.
Inputs: no named parameters.
Evidence pack of the latest scan of a domain: every tracker request in order with its phase (before consent / after Reject) and time, plus the cookies and consent signals. Returns a summary and download links (CSV and JSON, open without a login) for a client, a developer or a dispute. Works for monitored domains and audited sites.
Inputs: domain (required).
Full findings of the latest scan of a domain: which trackers and third-party requests fired before consent or kept running after 'Reject', the cookie banner's reject option, Google Consent Mode v2 signals, what happens after 'Accept', IAB TCF consent after Reject, Global Privacy Control, and a concrete fix and legal reference for each issue. Works for domains monitored in the account and for sites audited with audit_domain(s). For one finding in more depth use explain_finding.
Inputs: domain (required), language.
Gets the result of a quick_check that was still running, by the job_id that quick_check returned.
Inputs: job_id (required), language.
Creates (or returns the existing) private link to the latest report of a domain, for sending to a client or developer — opens without a login. Works for monitored domains and audited sites.
Inputs: domain (required), language.
Gets the status of a scan_domain or audit_domain that was still running, by the job_id it returned.
Inputs: job_id (required), language.
Returns a direct checkout link on bannerproof.app for a plan or audit credits (payment happens there, never in the chat). goal: 'audit' = one-off full report for one domain (€19), 'solo' = monitoring for 1 domain (€11/month), 'monitoring' = up to 7 domains (€49/month), 'agency' = up to 25 domains with white-label reports (€139/month), 'credits' = audit credits for checking any site (5 for €79, 15 for €199, 40 for €449). Prices include VAT; the checkout shows the final price.
Inputs: goal (required), domain, credits, language.
Lists the domains monitored in the connected Bannerproof account, with the latest score and whether issues were found.
Inputs: no named parameters.
Free check, no account needed: opens a public website like a first-time visitor and reports whether trackers or third-party requests fire before the visitor consents (GDPR/ePrivacy), with a 0–100 score. Returns only yes/no and the score; the full findings (which trackers, the exact requests, how to fix each one) are available with a connected Bannerproof account (get_findings). Results are cached for up to 7 days. This is an automated technical check, not legal advice.
Inputs: domain (required), language.
Runs a fresh scan of a domain monitored in the connected account (e.g. to check a fix). Waits up to about 40 seconds; if the scan is still running it returns a job_id for get_scan_status. A manual scan can be run once every 15 minutes per domain.
Inputs: domain (required), language.
Score and issue count over time for a domain monitored in the account (newest first, up to 30).
Inputs: domain (required).
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Cookie consent scanner: GDPR, CCPA, GCMv2. PASS/FAIL compliance checklists with fix recommendations.
Check what a site's cookie banner really blocks: CMP, trackers, cookies before consent.
Cookie consent for GDPR/CCPA: scan sites for trackers, configure consent banners, get install code.
Free website tracking audit, no account needed: GTM, GA4, Meta Pixel, Consent Mode v2, server-side
Add one secure layer between your agents and this server.
