RegSentry Website Tracking Inspector
Server Details
Inspect a public site's tracking signals, grade consent evidence, and get remediation playbooks.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 3 tools
Each tool has a clearly distinct purpose: inspection, interpretation, and remediation guidance. No overlap exists; the descriptions explicitly delineate boundaries, making tool selection unambiguous.
All tool names follow a consistent verb_noun snake_case pattern (get_, inspect_, interpret_). This uniform convention makes the API predictable and easy to navigate.
With only 3 tools, the server is tightly scoped to its core workflow without unnecessary bloat. Each tool serves an essential function in the inspection-to-remediation pipeline, making the count well-justified.
The toolset covers the full lifecycle: inspecting a site's tracking, interpreting consent evidence, and retrieving remediation guidance. This forms a complete, non-redundant workflow for the stated purpose, with no obvious gaps.
Available Tools
3 toolsget_remediation_playbookGet tracker remediation playbookARead-onlyIdempotentInspect
Returns deterministic, tracker-specific consent-gating guidance from RegSentry's maintained playbooks. It does not change a website, contact a vendor, or verify that a fix was implemented.
| Name | Required | Description | Default |
|---|---|---|---|
| tracker | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| risk | Yes | |
| steps | Yes | |
| docsUrl | No | |
| snippet | No | |
| tracker | Yes | |
| loadedVia | Yes | |
| disclaimer | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint=true, idempotentHint=true, and destructiveHint=false, and the description is fully consistent with them. It adds value beyond the annotations by disclosing that the output is 'deterministic' and sourced from 'maintained playbooks,' and by explicitly stating that it does not verify live fixes — meaning the result reflects static guidance rather than current site state. No contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences totaling roughly 30 words: the first states the core behavior and the second states scope exclusions. Nothing is redundant with the annotations or schema, and the most decision-relevant information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter lookup tool, the description covers purpose, determinism, data source, and non-effects, and the presence of an output schema relieves it of explaining return structure. The clear gaps are the semantics of the 'tracker' parameter (0% schema coverage) and the absence of explicit guidance for choosing between this tool and its siblings. It is adequate but not complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the 'tracker' property carries only type, regex pattern, and length bounds with no semantic description. The tool description contributes only the word 'tracker-specific,' implying the parameter identifies a tracker, but never states whether that should be a domain, vendor name, ID, or URL, and gives no examples. With coverage at 0%, the description was expected to compensate and largely does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Returns') and a specific resource ('deterministic, tracker-specific consent-gating guidance from RegSentry's maintained playbooks'). The negative scope statements ('does not change a website, contact a vendor, or verify that a fix was implemented') distinguish it from what an action-oriented remediation tool would do, so an agent can tell it apart from siblings like inspect_site_tracking and interpret_consent_evidence. This is a specific, non-tautological purpose statement.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The second sentence gives explicit exclusionary guidance: this tool performs a pure lookup and will not modify a website, contact a vendor, or verify implementation, so an agent knows not to select it for execution or verification tasks. However, it does not explicitly name sibling tools as alternatives for those cases, so routing is bounded but not fully directive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
inspect_site_trackingInspect site tracking setupARead-onlyIdempotentInspect
Performs a bounded, non-persisting GET of an authorized public domain's homepage and reports tracker markup, consent setup signals, and runtime-verification gaps. It does not run JavaScript, submit forms, create a RegSentry record, or make a legal determination.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Public domain only, such as example.com. Do not include a path or query. | |
| authorizationAcknowledged | Yes | Must be true to confirm the user owns or is authorized to inspect this domain. |
Output Schema
| Name | Required | Description |
|---|---|---|
| scope | Yes | |
| domain | Yes | |
| trackers | Yes | |
| disclaimer | Yes | |
| httpStatus | Yes | |
| limitations | Yes | |
| finalHostname | Yes | |
| consentSignals | Yes | |
| dynamicLoaders | Yes | |
| consentManagers | Yes | |
| consentSetupState | Yes | |
| runtimeVerificationRequired | Yes | |
| trackersRequiringRuntimeVerification | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds substantial behavioral detail beyond the annotations: it clarifies the operation is bounded and non-persisting, does not execute JavaScript, does not submit forms, does not create a RegSentry record, and does not make a legal determination. This is valuable context for an agent deciding whether the tool's results are sufficient, and it complements the readOnlyHint and idempotentHint annotations without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero wasted words. The first sentence front-loads the action, scope, and outputs; the second lists exclusions in a compact enumeration. Every phrase contributes to agent understanding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has an output schema, fully documented parameters, and annotations covering safety and idempotency. The description fills in the remaining behavioral gaps (what is and isn't inspected, what is not executed). An agent has everything needed to decide whether to call this tool and what to expect from it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both parameters well-documented in the schema. The description reinforces the 'authorized public domain' requirement but does not add new parameter-level semantics. Baseline 3 is appropriate when the schema carries the full burden.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('performs a bounded, non-persisting GET'), a resource ('authorized public domain's homepage'), and concrete outputs (tracker markup, consent signals, verification gaps). It also explicitly distinguishes itself from siblings by listing what it does not do (run JavaScript, submit forms, create records, make legal determinations), so an agent can tell it apart from get_remediation_playbook and interpret_consent_evidence.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context of what the tool does and its limitations, but it does not explicitly name sibling tools or provide when-to-use/alternative routing. The 'does not' exclusions imply when not to use this tool, but an agent is left to infer which sibling might be appropriate. This is implied usage guidance, not explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
interpret_consent_evidenceInterpret consent evidenceARead-onlyIdempotentInspect
Deterministically grades a redacted set of tracker-request observations by consent phase. It computes from the supplied data only, stores nothing, and returns a technical—not legal—interpretation.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | ||
| observations | Yes | ||
| consentBannerPresent | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| domain | Yes | |
| summary | Yes | |
| disclaimer | Yes | |
| evidenceGrade | Yes | |
| unresolvedTrackers | Yes | |
| observedAfterReject | Yes | |
| recommendedNextStep | Yes | |
| observedBeforeConsent | Yes | |
| typedValueTransmissionObserved | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, and non-destructive behavior. The description goes beyond this by adding determinism, statelessness ('computes from supplied data only, stores nothing'), and a clear non-legal scope disclaimer. These are valuable behavioral insights not present in the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: the first sentence immediately states the core purpose and determinism, and the second sentence adds behavioral guarantees without filler. Every clause contributes useful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema, clear annotations, and only three self-named parameters, the description covers behavior and scope fairly completely. The main gaps are parameter-level explanations and sibling routing, but these are partially compensated by the schema's structure and the tool's focused purpose.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate by explaining parameters. It loosely contextualizes observations via 'tracker-request observations' and 'consent phase', but it leaves 'domain' and 'consentBannerPresent' unexplained, and provides no hints about nested fields like requestCount or typedValueTransmitted.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb ('grades') and resource ('tracker-request observations'), and specifies the criterion ('by consent phase'). It also clarifies deterministic behavior and distinguishes itself from sibling tools like inspect_site_tracking and get_remediation_playbook by focusing on grading rather than inspection or remediation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when consent-phase grading of tracker observations is needed, and adds a useful exclusion: it returns a technical, not legal, interpretation. However, it does not explicitly state when to prefer this tool over siblings or provide alternative routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
- First observed
get_remediation_playbook - First observed
inspect_site_tracking - First observed
interpret_consent_evidence
Publisher details
- Operator
- Soxoa LLC
- Operator website
- https://soxoa.com
- Vendor relationship
- First-party
- Documentation
- https://regsentry.com/mcp-guide
- Trust center
- https://regsentry.com/security
- Restrictions
- Unknown
Related MCP Connectors
Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and
Cookie consent scanner: GDPR, CCPA, GCMv2. PASS/FAIL compliance checklists with fix recommendations.
Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.
Audit any website for AI visibility: graded report, findings with fixes, AI crawler access check.
Related MCP Servers
- AlicenseAqualityDmaintenanceAudit any website for privacy, security, accessibility, and performance issues — with scores, grades, and actionable fix instructions. No account required.34 npmMIT
- AlicenseNot gradedqualityBmaintenanceAudits public websites for AI crawler access, public technical signals, and deployment readiness. Includes a focused path to the full readiness report when deeper remediation guidance is needed.MIT
- AlicenseNot gradedqualityBmaintenanceRead-only observation of a single live URL: parses static HTML to report security posture, forms, links, accessibility signals, and leaks, with described fixes. SSRF-gated and safe, never executes JavaScript.45 npmMIT
- FlicenseNot gradedqualityBmaintenancePassive website security and trust auditor that checks for security, SEO, AI surface, email, and other exposures, producing a score and remediation plan.-
Glama MCP Gateway
Add one secure layer between your agents and this server.