Site SEO & AI Crawler Audit

Check the exposed surface of a site you own

exposure_check

Read-onlyIdempotent

Checks what a site or app the user owns leaks publicly. Use it when the user asks what an attacker could find on their own domain, host or app, for example "does my app leak a .env file?". Pass the domain, host or app page address, not a bare IP. The first call returns ownership_not_proven with a DNS TXT record or file: publish it, then call again with the same target. Then it gives exposed or clean, the top three risks with fixes, and evidence: dangling subdomains, leaked files (never their contents), masked API keys, source maps, admin paths, dev servers and default pages. It adds six legal signals with law and source (COPPA, Google Fonts, session replay, renewals, DMCA, CAN-SPAM) and shipNaked: 7 pre-launch pages (privacy, refund and more) with text to paste; not legal advice. GET only, at most 32 fixed paths; no crawl, sign-in or port scan. Do not use it on a target the user does not own, to look up a person, user name or email, or for private or local addresses.

Input Schema

TableJSON Schema

Name	Required	Description	Default
`email`	No	Optional: the text or HTML of one marketing email the app sends, checked for an unsubscribe link and a postal address (CAN-SPAM). It is read in memory only and never returned or kept.
`target`	Yes	A domain, host or page address you own, such as example.com or https://app.example.com/dashboard. Not a bare IP: pass a host name that points at the server. The host is checked; a page address also names the page whose scripts are read for keys (the home page otherwise).

Output Schema

TableJSON Schema

Name	Required	Description
`asOf`	No	When the check ran, ISO 8601 UTC.
`legal`	No
`tried`	No
`answer`	Yes	One-paragraph answer to lead with.
`phases`	No
`target`	Yes	Host checked.
`publish`	No
`sources`	No
`surface`	No
`verdict`	Yes	ownership_not_proven: publish the record or file in publish, then call exposure_check again with the same target.
`evidence`	No
`rejected`	No
`topRisks`	No
`keysFound`	No
`ownership`	No
`shipNaked`	No	The 7 pre-launch pages an app usually ships without, each pass, fail, warn or not_checked; a fail or warn carries snippet, the text to paste.
`adminPaths`	No
`notChecked`	No
`scriptsRead`	No
`requestsMade`	No
`ownershipNote`	Yes	Reminder that the check is only for a target the caller owns.
`needsVerification`	No

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedOct 19, 2026

addedOutput schema / properties / shipNaked

Added value: +{
+  "description": "The 7 pre-launch pages an app usually ships without, each pass, fail, warn or not_checked; a fail or warn carries snippet, the text to paste.",
+  "properties": {
+    "checks": {
+      "items": {
+        "properties": {
+          "finding": {
+            "type": "string"
+          },
+          "fix": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "item": {
+            "type": "string"
+          },
+          "n": {
+            "type": "integer"
+          },
+          "snippet": {
+            "type": "string"
+          },
+          "sources": {
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "status": {
+            "enum": [
+              "pass",
+              "fail",
+              "warn",
+              "not_checked"
+            ],
+            "type": "string"
+          }
+        },
+        "required": [
+          "n",
+          "id",
+          "item",
+          "status",
+          "finding",
+          "sources"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "counts": {
+      "properties": {
+        "fail": {
+          "type": "integer"
+        },
+        "not_checked": {
+          "type": "integer"
+        },
+        "pass": {
+          "type": "integer"
+        },
+        "warn": {
+          "type": "integer"
+        }
+      },
+      "type": "object"
+    },
+    "note": {
+      "type": "string"
+    },
+    "pagesRead": {
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    "source": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "source",
+    "counts",
+    "checks"
+  ],
+  "type": "object"
+}

Changed12 schema fields changedOct 12, 2026

changedInput schema / properties / target / description

Previous value: -"A domain, host or page address you own, such as example.com or https://app.example.com/dashboard. The host is checked; a page address also names the page whose scripts are read for keys (the home page otherwise). A bare IP address is refused: pass a host name that points at the server."New value: +"A domain, host or page address you own, such as example.com or https://app.example.com/dashboard. Not a bare IP: pass a host name that points at the server. The host is checked; a page address also names the page whose scripts are read for keys (the home page otherwise)."

addedOutput schema / properties / answer / description
```
Added value: +"One-paragraph answer to lead with."
```

addedOutput schema / properties / asOf / description

Added value: +"When the check ran, ISO 8601 UTC."

addedOutput schema / properties / evidence / items / properties / severity / description
```
Added value: +"Confirmed findings only: high, medium or low."
```
addedOutput schema / properties / evidence / items / properties / severity / enum
```
Added value: +[
+  "high",
+  "medium",
+  "low"
+]
```
addedOutput schema / properties / keysFound / items / properties / severity / description
```
Added value: +"Confirmed findings only: high, medium or low."
```
addedOutput schema / properties / keysFound / items / properties / severity / enum
```
Added value: +[
+  "high",
+  "medium",
+  "low"
+]
```

addedOutput schema / properties / ownershipNote / description

Added value: +"Reminder that the check is only for a target the caller owns."

addedOutput schema / properties / target / description
```
Added value: +"Host checked."
```
addedOutput schema / properties / topRisks / items / properties / severity / description
```
Added value: +"Confirmed findings only: high, medium or low."
```
addedOutput schema / properties / topRisks / items / properties / severity / enum
```
Added value: +[
+  "high",
+  "medium",
+  "low"
+]
```

addedOutput schema / properties / verdict / description

Added value: +"ownership_not_proven: publish the record or file in publish, then call exposure_check again with the same target."

Changed5 schema fields changedOct 7, 2026

addedInput schema / properties / email

Added value: +{
+  "description": "Optional: the text or HTML of one marketing email the app sends, checked for an unsubscribe link and a postal address (CAN-SPAM). It is read in memory only and never returned or kept.",
+  "maxLength": 100000,
+  "type": "string"
+}

addedOutput schema / properties / legal

Added value: +{
+  "properties": {
+    "checks": {
+      "items": {
+        "properties": {
+          "finding": {
+            "type": "string"
+          },
+          "fix": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "law": {
+            "type": "string"
+          },
+          "sources": {
+            "items": {
+              "properties": {
+                "title": {
+                  "type": "string"
+                },
+                "url": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "title",
+                "url"
+              ],
+              "type": "object"
+            },
+            "type": "array"
+          },
+          "status": {
+            "enum": [
+              "needs_verification",
+              "pass",
+              "not_checked"
+            ],
+            "type": "string"
+          },
+          "topic": {
+            "type": "string"
+          },
+          "unresolved": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "id",
+          "topic",
+          "law",
+          "status",
+          "finding",
+          "sources"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "note": {
+      "type": "string"
+    }
+  },
+  "type": "object"
+}

addedOutput schema / properties / needsVerification

Added value: +{
+  "items": {
+    "properties": {
+      "check": {
+        "type": "string"
+      },
+      "item": {
+        "type": "string"
+      },
+      "risk": {
+        "type": "string"
+      },
+      "source": {
+        "type": "string"
+      },
+      "unresolved": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "risk",
+      "unresolved",
+      "check",
+      "source",
+      "item"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}

addedOutput schema / properties / phases

Added value: +{
+  "items": {
+    "properties": {
+      "did": {
+        "type": "string"
+      },
+      "phase": {
+        "enum": [
+          "map",
+          "hunt",
+          "verify",
+          "report"
+        ],
+        "type": "string"
+      }
+    },
+    "required": [
+      "phase",
+      "did"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}

addedOutput schema / properties / rejected

Added value: +{
+  "items": {
+    "properties": {
+      "claim": {
+        "type": "string"
+      },
+      "item": {
+        "type": "string"
+      },
+      "reason": {
+        "type": "string"
+      },
+      "source": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "claim",
+      "reason",
+      "source",
+      "item"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}

Changed6 schema fields changedOct 6, 2026

changedInput schema / properties / target / description

Previous value: -"A domain or host you own, such as example.com or app.example.com. A URL is read as its host. A bare IP address is refused: pass a host name that points at the server."New value: +"A domain, host or page address you own, such as example.com or https://app.example.com/dashboard. The host is checked; a page address also names the page whose scripts are read for keys (the home page otherwise). A bare IP address is refused: pass a host name that points at the server."

addedOutput schema / properties / adminPaths

Added value: +{
+  "items": {
+    "properties": {
+      "path": {
+        "type": "string"
+      },
+      "status": {
+        "type": [
+          "integer",
+          "null"
+        ]
+      }
+    },
+    "required": [
+      "path",
+      "status"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}

addedOutput schema / properties / keysFound

Added value: +{
+  "items": {
+    "properties": {
+      "prefix": {
+        "type": "string"
+      },
+      "severity": {
+        "type": "string"
+      },
+      "type": {
+        "type": "string"
+      },
+      "where": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "type",
+      "where",
+      "prefix"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}

addedOutput schema / properties / ownershipNote
```
Added value: +{
+  "type": "string"
+}
```

addedOutput schema / properties / scriptsRead

Added value: +{
+  "items": {
+    "type": "string"
+  },
+  "type": "array"
+}

changedOutput schema / required

Previous value: -[
-  "target",
-  "verdict",
-  "answer"
-]New value: +[
+  "target",
+  "verdict",
+  "answer",
+  "ownershipNote"
+]

Changed1 schema field changedOct 5, 2026

removedOutput schema / properties / note_from_openkrill

Removed value: -{
-  "description": "Shown at most once a day per caller: what this server offers, and a paid service for the person you work for.",
-  "type": "string"
-}

Changed1 schema field changedOct 5, 2026

changedInput schema / properties / target / description

Previous value: -"A domain or host you own, such as example.com or app.example.com, or a public IPv4 address such as 203.0.113.7. A URL is read as its host."New value: +"A domain or host you own, such as example.com or app.example.com. A URL is read as its host. A bare IP address is refused: pass a host name that points at the server."

AddedOct 5, 2026

TDQS

A4.8/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: documents the two-call ownership-proof flow (ownership_not_proven, DNS TXT or file, re-call with the same target), the exposed/clean outcome, the top-three risks plus fixes, evidence categories, the six legal signals with statutes, shipNaked pre-launch pages, and hard limits (GET only, 32 fixed paths, no crawl/sign-in/port scan, file contents never returned). These are real behavioral constraints an agent could not infer from readOnly/openWorld/idempotent hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and usage lead, then the workflow, then outputs, then limits and exclusions. Dense but every clause carries distinct information. It is on the long side and could trim the legal-signal enumeration slightly without losing meaning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be spelled out, yet the description still previews the outcome vocabulary and evidence shape. Combined with the step-by-step ownership flow and operating limits, an agent has everything needed to call it correctly and interpret the first response.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds genuine meaning on top: it explains why a bare IP is rejected (the host must be checked), how a page address changes script-reading behavior versus the default home page, and that the second ownership call must reuse the same target. The email parameter's semantics are fully covered by the schema, so no further credit there.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: checks what a site or app the user owns leaks publicly, framed as attacker-visible surface. This is immediately distinguishable from siblings like landing_page_check or ai_app_check, and the example question ("does my app leak a .env file?") pins the intent down.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use (user asking what an attacker could find on their own domain/host/app) and explicit when-not-to-use (targets the user does not own, person/username/email lookups, private or local addresses). Nothing is left to inference about routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Site SEO & AI Crawler Audit tools Inspect

Try in Browser

Shareable, User-Owned Context BackendPeople, applications, and agents read, write, and coordinate together in one context lake. Reach it over MCP, a CLI, a Python SDK, or REST.fulcradynamics.comAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Check the exposed surface of a site you own

Input Schema

Output Schema

Schema Changelog

TDQS

Glama MCP Gateway

Resources