AcuityScan MCP Server
OfficialThe AcuityScan MCP Server lets AI clients run comprehensive website scans covering security, accessibility, performance, SEO, and more via ten specialized tools:
acuityscan_full_scan– Run 350+ checks across all 8 modules (email, DNS, SSL, performance, SEO, accessibility, privacy, mobile) in a single request.acuityscan_latest_scan– Retrieve the most recent saved scan for a domain without re-running it.acuityscan_email– Check SPF, DKIM, DMARC, MX, BIMI, MTA-STS, TLSRPT, reverse DNS, 77 blacklists, and Google/Yahoo bulk-sender compliance.acuityscan_dns– Inspect all DNS record types (A, AAAA, MX, TXT, NS, SOA, CAA, DS), DNSSEC validation, TTL, nameserver redundancy, and propagation across 20 global resolvers.acuityscan_ssl– Audit certificate chain, expiry, SANs, TLS protocols, cipher suites, security headers (HSTS, CSP, XFO), Google Safe Browsing status, and exposed sensitive files.acuityscan_performance– Run Google PageSpeed/Lighthouse at desktop and mobile, measure Core Web Vitals (LCP, CLS, INP, FCP, TTFB), detect CDN usage, and identify 60+ tech-stack technologies.acuityscan_seo– Evaluate title/meta tags, heading hierarchy, canonical URLs, Open Graph/Twitter cards, robots.txt, sitemap.xml, schema.org/JSON-LD, alt-text, and www/non-www consistency.acuityscan_accessibility– Perform a full axe-core WCAG 2.1 AA audit at desktop and mobile viewports plus 38+ custom HTML checks, with severity-ranked violations and selectors.acuityscan_privacy– Detect 28+ trackers, cookie consent banners, pre-consent tracking violations, CCPA "Do Not Sell" links, Google Consent Mode v2, and mixed-content issues.acuityscan_mobile– Check viewport settings, tap target sizing, font sizes, PWA features, intrusive interstitials, responsive images, and horizontal overflow.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@AcuityScan MCP ServerCheck the SSL configuration of example.com"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
AcuityScan MCP Server
Run AcuityScan website security, accessibility, performance, and SEO scans directly from your AI client via the Model Context Protocol.
Compatible with Claude Desktop, Cursor, Continue, and any other MCP client.
You: Is acme.com missing any email-auth records?
Claude: [calls acuityscan_email] → Your DMARC policy is "none" (monitor
only). SPF is configured. DKIM selectors not found at the 16
common locations — confirm with your mail provider…What it gives your AI
Ten tools, each wrapping one AcuityScan REST endpoint:
Tool | What it does |
| Full Site+ Scan — 350+ checks across all 8 modules (30s–5min) |
| Fetch your last saved scan without re-running |
| SPF, DKIM, DMARC, MX, BIMI, MTA-STS, 77 blacklists, Google/Yahoo bulk compliance |
| All records, DNSSEC, 20-resolver propagation |
| TLS protocol + cipher, cert chain, security headers, Google Safe Browsing |
| Desktop + mobile Lighthouse, Core Web Vitals, tech-stack detection |
| Title/meta/headings/canonical/OG/sitemap/schema.org |
| Full axe-core WCAG 2.1 AA at desktop + mobile viewports + 38 custom checks |
| 28+ trackers, consent banner, CCPA link, Consent Mode v2 |
| Viewport, tap targets, font size, PWA features, intrusive interstitials |
Related MCP server: Sekrd Security Scanner
Setup
1. Get an API key
AcuityScan API access requires the Agency plan.
Sign up or sign in at acuityscan.com
Upgrade to Agency on the pricing page
Open /settings → API keys and create a key
Copy the token — it's shown once
2. Configure your MCP client
Claude Desktop
Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"acuityscan": {
"command": "npx",
"args": ["-y", "@acuityscan/mcp"],
"env": {
"ACUITYSCAN_API_KEY": "asc_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}
}
}
}Quit and reopen Claude Desktop. You'll see acuityscan in the tools menu.
Cursor
Open Cursor settings → MCP → add a new server. Same command, args, and env as the Claude Desktop config above.
Continue.dev
In .continue/config.json:
{
"experimental": {
"modelContextProtocolServers": [
{
"transport": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@acuityscan/mcp"]
},
"env": {
"ACUITYSCAN_API_KEY": "asc_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}
}
]
}
}Usage
Once configured, just ask:
"Run a full AcuityScan on stripe.com"
"What email-auth records is acme.com missing?"
"Check the accessibility of vercel.com"
"Is example.com's SSL configured correctly?"
"Get my last scan for clientsite.com"
Your AI client will pick the right tool, send the request to AcuityScan with your API key, and explain the results in plain English.
Rate limits
The Agency plan ships with 250 API requests / 24 hours per account, shared across all your keys. Each MCP tool call counts as one request. Need more? Email support@acuityscan.com.
Troubleshooting
"ACUITYSCAN_API_KEY is not set"
Your MCP client isn't passing the env var. Double-check the env block in your client config and restart the client.
"API access requires the Agency plan"
You're signed in but on Free or Pro. Upgrade at acuityscan.com/pricing. API access auto-activates within seconds of upgrading — no key re-issue needed.
"Scan timed out after 300s"
Some heavy WordPress sites push the performance / accessibility scanners to their ceiling. Retry, or run individual tools (acuityscan_dns, acuityscan_ssl, etc.) instead of acuityscan_full_scan.
Development
git clone https://github.com/acuityscan/mcp
cd mcp
npm install
ACUITYSCAN_API_KEY=asc_live_xxx npm run devThen in your MCP client config, swap the npx command for an absolute path to your local clone:
"command": "node",
"args": ["/path/to/mcp/dist/index.js"]License
MIT — see LICENSE.
Links
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- Flicense-quality-maintenanceProvides comprehensive website auditing for SEO, performance, accessibility, and security using AI-powered analysis. It enables users to generate detailed audit reports and actionable improvement suggestions for any given URL.Last updated

Sekrd Security Scannerofficial
FlicenseAqualityDmaintenanceEnables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.Last updated3- Alicense-qualityBmaintenanceEnables AI coding assistants to test web accessibility by scanning URLs, detecting violations, and running focused audits on keyboard navigation, screen reader compatibility, and WCAG criteria — all within the assistant's loop.Last updatedMIT
- Alicense-qualityAmaintenanceEnables AI agents to scan code for security and quality issues and receive machine-readable reports with suggested fixes and verification criteria.Last updated852MIT
Related MCP Connectors
Scan URLs for WCAG 2.1 violations, generate AI fixes, and produce VPAT 2.5 compliance reports.
Deterministic axe-core accessibility scans (WCAG 2.1 AA, EN 301 549, PDF/UA) via your account.
AI QA tester — real browsers scan sites for bugs, SEO, perf, and accessibility issues via chat.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/AcuityScan/mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server