Provides website performance testing through Google PageSpeed Insights API, analyzing Core Web Vitals and Google ranking signals for both mobile and desktop.
Integrates Lighthouse testing capabilities for comprehensive website analysis including performance metrics, SEO evaluation, and accessibility scoring through multiple testing platforms.
Enables security analysis through Mozilla Observatory API, testing HTTP security headers, CSP policies, HSTS configuration, and overall security posture of websites.
Performs detailed website performance analysis using Google PageSpeed Insights, providing Core Web Vitals measurements, performance scores, and optimization recommendations.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Webby MCP Serverrun a comprehensive performance test on our homepage"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Webby - Comprehensive Website Validator MCP Server
A Model Context Protocol (MCP) server that provides comprehensive website testing across performance, accessibility, SEO, and security dimensions.
Features
π Performance Testing
WebPageTest β - Real browser testing via Playwright automation (300 tests/month free, no API key)
Google PageSpeed Insights β - Core Web Vitals and Google ranking signals (25K API calls/day free)
GTmetrix β - Lighthouse + custom metrics with historical tracking (requires API key)
βΏ Accessibility Testing
Axe DevTools β - Fast WCAG scans via Playwright + axe-core (free, open-source)
WAVE β - WCAG compliance and contrast analysis (requires API key)
π SEO Testing
PageSpeed Insights SEO β - Uses Lighthouse SEO (free, comprehensive)
π Security Testing
Mozilla Observatory β - HTTP security headers analysis (CSP, HSTS) - Free API, 1 scan/min
SSL Labs β - Comprehensive SSL/TLS certificate testing - Free API (requires email)
Installation
cd ~/mcp-servers/servers/src/webby
npm install
npm run buildMCP Tools (11 Total)
Performance Tools (3)
validate_performance_pagespeed
{
url: string,
strategy?: 'mobile' | 'desktop', // default: mobile
apiKey?: string // optional, for higher quota
}
// Returns: Performance score, Core Web Vitals, metricsvalidate_performance_webpagetest β¨ NEW
{
url: string,
location?: string, // e.g., 'Dulles:Chrome'
runs?: number, // default: 1
waitForResults?: boolean, // default: false (returns test ID immediately)
timeout?: number // default: 300000 (5 min)
}
// Returns: Test ID + results URL immediately OR full results if waitForResults=true
// Metrics: Load Time, FCP, LCP, Speed Index, TTI, TBT, CLS, Performance Gradevalidate_performance_gtmetrix
{
url: string,
apiKey: string, // required
location?: string, // e.g., 'vancouver-canada'
browser?: string // e.g., 'chrome'
}
// Returns: Lighthouse score, PageSpeed score, load time, page sizeAccessibility Tools (2)
validate_accessibility_axe
{
url: string,
wcagLevel?: string // wcag2a, wcag2aa, wcag2aaa, wcag21aa, wcag22aa
}
// Returns: Violations by severity (critical, serious, moderate, minor), passes, incompletevalidate_accessibility_wave
{
url: string,
apiKey: string, // required
reporttype?: 1 | 2 | 3 | 4 // detail level (default: 2)
}
// Returns: Errors, contrast errors, alerts, WAVE report URL, credits remainingSecurity Tools (2)
validate_security_mozilla_observatory
{
url: string,
forceRescan?: boolean // default: false
}
// Returns: Grade (A+ to F), score, tests passed/failed, details URLvalidate_security_ssl_labs
{
url: string,
email: string, // required by API
maxAge?: number, // cached report age in hours
startNew?: boolean, // force new assessment
waitForComplete?: boolean, // wait for completion (can take 2-5 min)
maxWaitMinutes?: number // default: 5
}
// Returns: Grade (A+ to F), endpoint details, protocol info, statusCategory Runners (4)
validate_all_performance
{
url: string,
pagespeedApiKey?: string,
gtmetrixApiKey?: string,
webpagetestEnabled?: boolean, // enable browser automation
webpagetestWaitForResults?: boolean // wait for WPT completion
}
// Returns: Results from PageSpeed + optionally WebPageTest + optionally GTmetrixvalidate_all_accessibility
{
url: string,
waveApiKey?: string, // optional
wcagLevel?: string // for Axe
}
// Returns: Results from Axe + optionally WAVEvalidate_all_seo
{
url: string
}
// Returns: SEO analysis from PageSpeed Insights (Lighthouse SEO)validate_all_security
{
url: string,
email: string, // for SSL Labs
waitForSSL?: boolean // wait for SSL Labs completion
}
// Returns: Results from Mozilla Observatory + SSL LabsMaster Runner (1)
validate_comprehensive
{
url: string,
email: string, // required for SSL Labs
categories?: string[], // ['performance', 'accessibility', 'seo', 'security']
pagespeedApiKey?: string,
gtmetrixApiKey?: string,
waveApiKey?: string,
wcagLevel?: string,
waitForSSL?: boolean
}
// Returns: Complete analysis across all selected categories with overall health scoreResponse Format
{
"tool": "webpagetest",
"success": true,
"url": "https://example.com",
"test_id": "250107_AiDcA4_ABC",
"results_url": "https://www.webpagetest.org/result/250107_AiDcA4_ABC/",
"status": "complete",
"summary": {
"loadTime": 2500,
"firstContentfulPaint": 1200,
"speedIndex": 2300,
"largestContentfulPaint": 2100,
"timeToInteractive": 3500,
"totalBlockingTime": 250,
"cumulativeLayoutShift": 0.05
},
"performance_grade": "A",
"security_grade": "A+"
}Implementation Status
β Fully Implemented (9 tools)
validate_performance_pagespeed- Google PageSpeed Insights APIvalidate_performance_webpagetest- Playwright browser automation β¨validate_performance_gtmetrix- GTmetrix APIvalidate_accessibility_axe- Playwright + axe-corevalidate_accessibility_wave- WAVE APIvalidate_security_mozilla_observatory- Mozilla Observatory APIvalidate_security_ssl_labs- SSL Labs API with pollingvalidate_all_*- All 4 category orchestratorsvalidate_comprehensive- Master orchestrator
β All Tools Functional
No placeholders - all 11 tools are fully implemented and working!
API Quotas & Limits
Tool | Free Limit | API Key Required | Implementation |
Mozilla Observatory | 1 scan/min per domain | No | β Direct API |
SSL Labs | Unlimited (rate limited) | Email only | β Direct API |
PageSpeed Insights | 25,000/day | Optional (free) | β Direct API |
WebPageTest | 300/month | No | β Browser automation |
GTmetrix | Limited credits | Yes (free tier) | β Direct API |
Axe | Unlimited | No | β Browser automation |
WAVE | Varies by plan | Yes (paid) | β Direct API |
Browser Automation
WebPageTest and Axe use Playwright for headless browser automation:
Singleton browser instance - Reused across tests for efficiency
Configurable timeouts - Default 5 minutes for WebPageTest, 1 minute for Axe
Graceful cleanup - Browser closed on MCP server shutdown
No API keys needed - Free access via web UI automation
Project Structure
webby/
βββ src/
β βββ performance/
β β βββ pagespeed.ts β
Google API
β β βββ webpagetest.ts β
Playwright automation
β β βββ gtmetrix.ts β
GTmetrix API
β βββ accessibility/
β β βββ axe.ts β
Playwright + axe-core
β β βββ wave.ts β
WAVE API
β βββ security/
β β βββ mozilla-observatory.ts β
Mozilla API
β β βββ ssl-labs.ts β
SSL Labs API + polling
β βββ shared/
β β βββ browser-utils.ts β
Playwright utilities
β βββ orchestrator/
β βββ run-all.ts β
All orchestrators
βββ dist/ # Compiled JavaScript
βββ index.ts # Main MCP server entry
βββ package.json
βββ README.mdUsage Examples
Quick WebPageTest (instant response)
validate_performance_webpagetest("https://example.com")
// Returns test ID immediately, check results later at provided URLComplete WebPageTest (wait for results)
validate_performance_webpagetest("https://example.com", {
waitForResults: true,
timeout: 300000 // 5 minutes
})
// Waits for test completion, returns full metricsRun all performance tests
validate_all_performance("https://example.com", {
webpagetestEnabled: true, // Enable browser automation
webpagetestWaitForResults: false // Get test ID instantly
})
// Returns: PageSpeed + WebPageTest resultsComprehensive validation
validate_comprehensive("https://example.com", {
email: "your@email.com", // For SSL Labs
categories: ["performance", "security"],
webpagetestEnabled: true
})
// Returns: Full analysis with overall health scoreLicense
MIT