com.validoria/validoria-mcp

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Continuous website testing by Validoria — monitor security, SEO, performance, and accessibility.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "validoria-mcp": {
      "url": "https://api.teste.no/api/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (74)

• guest_start_scan

  Run a free 6-test HTTP scan against a public URL without an API key. Rate-limited (5/IP/hour, 3/session/day). Returns scanId — poll with guest_get_scan. For continuous monitoring, sign up free and use create_target. See teste-no://docs/quickstart.

  Parameters:

  • url (required) — string — Public http(s) URL to scan, e.g. https://example.com

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• guest_get_scan

  Poll results for a guest_start_scan. Pass the scanId and guestSessionId from the start response. No API key required.

  Parameters:

  • scanId (required) — string — Scan workflow id from guest_start_scan
  • guestSessionId — string — Guest session id returned by guest_start_scan

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_targets

  List all monitoring targets for your team. Returns name, URL, type, status, and uptime info for each target.

  Parameters:

  • type — string — Filter by target type
  • limit — number — Max number of targets to return
  • status — string — Filter by target status

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_target

  Get detailed information about a specific target including status, uptime, fingerprint, and composite scores.

  Parameters:

  • targetId (required) — string — The target ID to look up

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_target_scores

  Get composite scores (Security, SEO, Performance, Accessibility, AI-search readiness) for a target. Each score is 0-100 with a status rating.

  Parameters:

  • targetId (required) — string — The target ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_findings

  List findings (discovered issues) across your targets. Filter by status, severity, or target. Returns title, severity, status, test name, and AI enrichment if available.

  Parameters:

  • limit — number — Max number of findings to return
  • status — string — Filter by finding status (default: OPEN)
  • severity — string — Filter by severity
  • targetId — string — Filter by target ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_finding

  Get full details of a specific finding, including evidence, AI analysis, and recommended fix.

  Parameters:

  • findingId (required) — string — The finding ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_incidents

  List incidents (grouped operational issues) across your targets. Filter by status. Returns title, severity, status, findings count, and deployment correlation.

  Parameters:

  • limit — number — Max number of incidents to return
  • status — string — Filter by incident status
  • targetId — string — Filter by target ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_incident

  Get full details of a specific incident including linked findings, AI analysis, and deployment correlation.

  Parameters:

  • incidentId (required) — string — The incident ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_runs

  List recent test runs. Filter by target, status, or test slug. Returns run status, score, summary, duration, and finding count.

  Parameters:

  • limit — number — Max number of runs to return
  • status — string — Filter by run status
  • targetId — string — Filter by target ID
  • testSlug — string — Filter by test definition slug (e.g. "security-headers")

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_run

  Get full details of a specific test run including metrics, score, summary, errors, and associated findings.

  Parameters:

  • runId (required) — string — The run ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• active_runs

  Get currently running and queued tests across all targets. Useful for checking what tests are in progress right now.

  Parameters:

  • targetId — string — Filter by target ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• team_stats

  Get team-wide overview statistics: total runs, pass rate, open findings, open incidents, average duration. Supports lifetime, monthly, or weekly periods.

  Parameters:

  • period — string — Period filter: "lifetime", "2026-04" (monthly), or "2026-W14" (weekly). Defaults to lifetime.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• target_stats

  Get statistics for a specific target: runs, pass rate, findings, duration. Supports lifetime, monthly, or weekly periods.

  Parameters:

  • targetId (required) — string — The target ID
  • period — string — Period filter: "lifetime", "2026-04" (monthly), or "2026-W14" (weekly). Defaults to lifetime.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• daily_trends

  Get daily time-series data for runs, findings, and average duration. Useful for identifying trends over time. Returns up to 90 days of data.

  Parameters:

  • days — number — Number of days of history to return
  • targetId — string — Filter by target ID (omit for team-wide)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_site_map

  Get the latest crawl snapshot for a target. Returns page inventory stats, SEO issues, broken pages/assets, response times, and a diff against the previous crawl. Optionally include page-level details.

  Parameters:

  • targetId (required) — string — The target ID
  • pageLimit — number — Max pages to return when includePages is true
  • pageStatus — string — Filter pages by status
  • includePages — boolean — Include individual page data (can be large). Default: false.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_maintenance_windows

  List maintenance windows for a target. Shows scheduled and recurring maintenance periods that suppress alerts.

  Parameters:

  • targetId (required) — string — The target ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_tests

  List all available test definitions (plugins). Shows slug, name, category, runner type, weight class, schedule, and enablement status. Useful for knowing which tests can be triggered.

  Parameters:

  • category — string — Filter by test category
  • enabledOnly — boolean — Only show enabled tests. Default: true.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• trigger_test

  Run a specific test against a target. Specify either the test definition ID or slug. The test is queued and executed asynchronously — use get_run to check status.

  Parameters:

  • targetId (required) — string — The target ID to test
  • testId — string — Test definition ID (use this or testSlug)
  • testSlug — string — Test slug e.g. "security-headers" (use this or testId)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• trigger_all_tests

  Run all enabled tests against a target as a scan workflow. All tests in the target's test profile are queued. Returns the workflow ID and list of queued runs.

  Parameters:

  • targetId (required) — string — The target ID to scan

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• acknowledge_incident

  Acknowledge an open incident to signal that someone is looking at it. Changes status from OPEN to ACKNOWLEDGED.

  Parameters:

  • incidentId (required) — string — The incident ID to acknowledge

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• resolve_incident

  Resolve an incident to mark it as handled. Changes status to RESOLVED and sets the closed timestamp.

  Parameters:

  • incidentId (required) — string — The incident ID to resolve

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mute_finding

  Mute an open finding to suppress it from dashboards and alerts. Status changes from OPEN to MUTED.

  Parameters:

  • findingId (required) — string — The finding ID to mute

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_maintenance_window

  Schedule a maintenance window for a target. During maintenance, alerts and notifications are suppressed. Supports one-time, daily, and weekly recurring windows.

  Parameters:

  • targetId (required) — string — The target ID
  • name (required) — string — Name for the window, e.g. "Weekly deploy"
  • startsAt (required) — string — Start time as ISO 8601 string, e.g. "2026-04-05T02:00:00Z"
  • endsAt (required) — string — End time as ISO 8601 string, e.g. "2026-04-05T04:00:00Z"
  • recurrence — string — Recurrence pattern (required if isRecurring is true)
  • description — string — Optional description
  • isRecurring — boolean — Whether this window repeats

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_maintenance_window

  Remove a scheduled maintenance window.

  Parameters:

  • windowId (required) — string — The maintenance window ID to delete
  • targetId (required) — string — The target ID (for access verification)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• record_deployment

  Record a deployment event for a target. Deployments are auto-correlated with incidents created within 20 minutes. Useful for tracking releases and root-cause analysis.

  Parameters:

  • targetId (required) — string — The target ID
  • version — string — Version string, e.g. "v2.4.1"
  • commitSha — string — Git commit SHA
  • deployedBy — string — Who deployed (name, email, or system)
  • description — string — Deployment description or changelog
  • environment — string — Environment, e.g. "production", "staging"

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• recompute_scores

  Force recompute all composite scores (Security, SEO, Performance, Accessibility) for a target. Useful after manual changes or when scores seem stale.

  Parameters:

  • targetId (required) — string — The target ID to recompute scores for

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_automation_rules

  List all automation rules for the team. Rules automatically react to events (test failures, incidents, downtime) with configurable actions (escalate severity, suppress, rerun, webhook, notify).

  Parameters:

  • enabled — boolean — Filter by enabled/disabled status

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_automation_rule

  Get full details of a specific automation rule.

  Parameters:

  • ruleId (required) — string — The automation rule ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_automation_rule

  Create an automation rule that reacts to events. Triggers: TEST_FAILED, TEST_RECOVERED, INCIDENT_CREATED, INCIDENT_RESOLVED, TARGET_DOWN, TARGET_RECOVERED. Actions: escalate (change severity), suppress (mute), rerun (schedule retry), notify, webhook, add_note.

  Parameters:

  • name (required) — string — Rule name
  • trigger (required) — string — Event that triggers the rule
  • actions (required) — array — Actions to execute when triggered
  • targetId — string — Optional target ID to scope rule to a specific target
  • conditions — object — Optional conditions that must be met
  • priorityOrder — integer — Priority order (lower = evaluated first)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• update_automation_rule

  Update an existing automation rule. Any field not provided will remain unchanged.

  Parameters:

  • ruleId (required) — string — The automation rule ID to update
  • name — string — Updated rule name
  • actions — array — Updated actions
  • trigger — string — Updated trigger event
  • targetId — ['string', 'null'] — Updated target scope (null to remove target scoping)
  • isEnabled — boolean — Enable or disable the rule
  • conditions — object — Updated conditions
  • priorityOrder — integer — Updated priority order

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_automation_rule

  Permanently delete an automation rule.

  Parameters:

  • ruleId (required) — string — The automation rule ID to delete

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_journeys

  List custom browser test flows (journeys) for a target or all team targets. Journeys are multi-step Playwright tests that verify user flows like checkout, login, and search.

  Parameters:

  • targetId — string — Filter by target ID. If omitted, lists all team journeys.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_journey

  Get full details of a specific journey including all steps.

  Parameters:

  • journeyId (required) — string — The journey ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_journey

  Create a custom browser test flow for a target. Steps are executed sequentially in a Playwright browser. Supports actions: navigate, click, type, fill, select, assert, wait, screenshot, scroll, hover, use_fragment. Variables like {{LOGIN_EMAIL}} are resolved from the target secrets vault.

  Parameters:

  • targetId (required) — string — Target ID to create the journey for
  • name (required) — string — Journey name
  • steps (required) — array — Ordered list of browser actions
  • platform — string — Platform tag (e.g. "shopify", "woocommerce")
  • description — string — Journey description
  • timeoutSeconds — number — Max execution time in seconds

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• update_journey

  Update a journey's name, settings, or steps. When steps are provided, all existing steps are replaced.

  Parameters:

  • journeyId (required) — string — The journey ID to update
  • name — string — Updated name
  • steps — array — Replacement steps (replaces all existing steps)
  • isEnabled — boolean — Enable or disable the journey
  • description — Updated description
  • timeoutSeconds — number — Updated timeout

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_journey

  Permanently delete a journey and all its steps.

  Parameters:

  • journeyId (required) — string — The journey ID to delete

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• trigger_journey

  Execute a journey (custom browser test flow) against its target. The journey runs asynchronously — use get_run to check progress.

  Parameters:

  • journeyId (required) — string — The journey ID to trigger

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_scheduled_reports

  List all scheduled reports for the team. Reports are automatically generated and emailed on a daily or weekly basis.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_scheduled_report

  Create a new scheduled email report. Reports include run stats, open findings, composite scores, and per-target status.

  Parameters:

  • name — string — Report name
  • hourUtc — number — Hour in UTC to send the report
  • dayOfWeek — number — Day of week for WEEKLY reports (0=Sunday, 1=Monday, ..., 6=Saturday)
  • frequency — string — How often to send
  • recipients — string — Comma-separated email addresses. Empty = all team members.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• update_scheduled_report

  Update an existing scheduled report. Any field not provided stays unchanged.

  Parameters:

  • reportId (required) — string — The scheduled report ID to update
  • name — string — Updated name
  • enabled — boolean — Enable or disable the report
  • hourUtc — number — Updated hour UTC
  • dayOfWeek — number — Updated day of week
  • frequency — string — Updated frequency
  • recipients — string — Updated comma-separated email list

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_scheduled_report

  Permanently delete a scheduled report.

  Parameters:

  • reportId (required) — string — The scheduled report ID to delete

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_team_settings

  Get the team's configuration including AI enrichment, uptime monitoring, severity escalation, run policies, notification coalescing, SEO, and Kloner Tasks integration settings.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• update_team_settings

  Update team configuration. All fields are optional — only provided fields are changed. Covers: AI enrichment (model, temperature, auto-enrich, spending cap), uptime (timeout, thresholds), severity escalation (recurrence/age triggers), run policies (concurrency, timeouts), SEO (rank tracking, keyword strategy), notification coalescing (digest), and the kill switch (testsPaused).

  Parameters:

  • aiModel — string — Model id on the AI gateway for finding enrichment (e.g. mistral/mistral-small-2603, an EU route)
  • aiEnabled — boolean — Enable/disable AI finding enrichment
  • aiCapAction — string — Action when cap is reached
  • testsPaused — boolean — Kill switch — pauses ALL scheduled and manual test runs
  • aiAutoEnrich — boolean — Auto-enrich new findings with AI
  • digestEnabled — boolean — Enable notification alert coalescing
  • aiMonthlyCapUsd — Monthly AI spending cap in USD (null = unlimited)
  • aiSourceReviewModel — string — Model for AI source review plugin
  • defaultRunTimeoutMs — number — Default run timeout in ms
  • digestWindowSeconds — number — Digest window duration in seconds
  • escalateInfoAgeDays — number — Finding age in days before INFO→WARNING
  • seoRankCheckEnabled — boolean — Enable Google rank tracking
  • uptimeFailThreshold — number — Consecutive failures before DOWN
  • uptimePingTimeoutMs — number — Uptime ping timeout in ms
  • maxDailyRunsPerTarget — number — Max test runs per target per day (0=unlimited). Prevents overwhelming hosted sites with limited request budgets.
  • escalateInfoRecurrence — number — Finding recurrences before INFO→WARNING
  • escalateWarningAgeDays — number — Finding age in days before WARNING→CRITICAL
  • defaultScheduleMultiplier — number — Schedule frequency multiplier (< 1 = more frequent)
  • escalateWarningRecurrence — number — Finding recurrences before WARNING→CRITICAL
  • uptimeDegradedThresholdMs — number — Response time threshold for DEGRADED status
  • maxConcurrentRunsPerTarget — number — Max concurrent test runs per target

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_notification_rules

  List all notification alert rules for the team. Rules map event types + severity levels to notification channels.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_notification_rule

  Create a notification alert rule. Defines which events at which severity levels trigger notifications on which channels. Supports quiet hours and per-target scoping.

  Parameters:

  • name (required) — string — Rule name
  • eventTypes (required) — array — Events that trigger this rule
  • channelTypes (required) — array — Channels to notify
  • enabled — boolean — Whether the rule is active
  • targetId — string — Scope to a specific target
  • severities — array — Only trigger for these severities
  • quietHoursEnd — number — Quiet hours end (hour UTC)
  • quietHoursStart — number — Quiet hours start (hour UTC)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• update_notification_rule

  Update a notification rule. Only provided fields are changed.

  Parameters:

  • ruleId (required) — string — The notification rule ID
  • name — string
  • enabled — boolean
  • eventTypes — array
  • severities — array
  • channelTypes — array
  • quietHoursEnd
  • quietHoursStart

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_notification_rule

  Permanently delete a notification rule.

  Parameters:

  • ruleId (required) — string — The notification rule ID to delete

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_notification_channels

  List all notification channels (Email, Slack, Webhook, SMS, Web Push) configured for the team. Sensitive config values are redacted.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_keywords

  List all SEO keywords tracked for a target, including latest Google rank position and the page each is tracked for. Max 50 per target.

  Parameters:

  • targetId (required) — string — The target ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• add_keyword

  Add an SEO keyword to track for a target, optionally for one page (pageUrl). Max 50 keywords per target.

  Parameters:

  • targetId (required) — string — The target ID
  • keyword (required) — string — The keyword to track
  • pageUrl — string — The page this keyword is written for (absolute URL on the site)
  • isPrimary — boolean — Mark as primary keyword
  • pageScope — string — URL pathname pattern to scope the keyword to (e.g. /kategori/*)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• remove_keyword

  Remove an SEO keyword from a target.

  Parameters:

  • keywordId (required) — string — The keyword ID to remove
  • targetId (required) — string — The target ID (for access verification)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• start_load_test

  Start a load test against a target. Max 100 concurrent connections, max 5 min duration, 1 test at a time per target, 60s cooldown between tests. Modes: HTTP_FLOOD (autocannon), BROWSER_USERS (Playwright), COMBINED (both). OWNER/ADMIN only.

  Parameters:

  • targetId (required) — string — The target ID to load test
  • mode — string — Load test mode
  • rampUp — number — Ramp-up time in seconds
  • duration — number — Test duration in seconds
  • targetUrl — string — Override URL (defaults to target URL)
  • httpMethod — string — HTTP method
  • concurrency — number — Number of concurrent connections
  • acknowledgeSharedOrigin — boolean — Acknowledge blast radius if target shares a server with other monitored sites

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cancel_load_test

  Cancel a running load test.

  Parameters:

  • loadTestRunId (required) — string — The load test run ID to cancel

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_load_test

  Get details and results of a load test run.

  Parameters:

  • loadTestRunId (required) — string — The load test run ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_load_tests

  List recent load test runs for a target.

  Parameters:

  • targetId (required) — string — The target ID
  • limit — number — Max results

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_secrets

  List secrets stored in a target's vault. Values are masked — only key names and labels are shown. Secrets are used by test plugins (e.g. LOGIN_EMAIL, LOGIN_PASSWORD for B2B shops, ga4_service_account for GA4).

  Parameters:

  • targetId (required) — string — The target ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• store_secret

  Store an encrypted secret in a target's vault. Common keys: LOGIN_EMAIL, LOGIN_PASSWORD (B2B shop auth), ga4_service_account (GA4 monitoring). Values are AES-256-GCM encrypted at rest.

  Parameters:

  • targetId (required) — string — The target ID
  • key (required) — string — Secret key (e.g. LOGIN_EMAIL)
  • label (required) — string — Human-readable label
  • value (required) — string — Secret value (will be encrypted)
  • description — string — Optional description
  • environment — string — Environment scope

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• rotate_secret

  Update the value of an existing secret.

  Parameters:

  • secretId (required) — string — The secret ID to rotate
  • targetId (required) — string — The target ID (for access verification)
  • newValue (required) — string — New secret value

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_secret

  Permanently delete a secret from a target's vault.

  Parameters:

  • secretId (required) — string — The secret ID to delete
  • targetId (required) — string — The target ID (for access verification)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_page_fragments

  List all reusable page fragments for the team. Fragments are shared step sequences (e.g. "Login", "Dismiss Cookies") that can be inserted into multiple Journeys via the use_fragment action.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_page_fragment

  Create a reusable step sequence that can be shared across multiple Journeys. Fragment names must be unique per team.

  Parameters:

  • name (required) — string — Fragment name (unique per team)
  • steps (required) — array — Ordered list of browser actions
  • description — string — Fragment description

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• update_page_fragment

  Update a page fragment. When steps are provided, all existing steps are replaced.

  Parameters:

  • fragmentId (required) — string — The fragment ID
  • name — string — Updated name
  • steps — array — Replacement steps
  • description

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_page_fragment

  Permanently delete a page fragment.

  Parameters:

  • fragmentId (required) — string — The fragment ID to delete

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_target

  Add a new website, API, or webshop target for monitoring with full onboarding. Automatically enables compatible tests, triggers an initial scan, and captures a page screenshot. Requires write scope (Free plan: 1 target). Use analyze_target first to detect platform and get test recommendations.

  Parameters:

  • name (required) — string — Display name for the target
  • url (required) — string — URL to monitor, e.g. "https://example.com"
  • type (required) — string — Target type: WEBSITE, API, or WEBSHOP. Use analyze_target to auto-detect.
  • tags — array — Optional tags for categorization
  • weight — string — Business weight, used to rank findings by consequence: REVENUE_PATH (checkout, payment, signup), PUBLIC (customer-visible but not transactional), INTERNAL (staging, admin tooling).
  • environment — string — Deployment environment
  • uptimeEnabled — boolean — Enable background uptime monitoring

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• update_target

  Update a target's properties (name, URL, type, environment, business weight, tags, uptime toggle).

  Parameters:

  • targetId (required) — string — The target ID to update
  • url — string — New URL
  • name — string — New display name
  • tags — array — New tags (replaces existing)
  • type — string — New target type
  • weight — string — New business weight: REVENUE_PATH, PUBLIC or INTERNAL. Changing this rescores the target's open findings so the consequence ranking updates immediately.
  • environment — string — New environment
  • uptimeEnabled — boolean — Toggle uptime monitoring
  • uptimeKeyword — Keyword to verify in response body during uptime checks. When set, every uptime ping GETs the page and verifies this text appears (case-insensitive). If missing, the site is treated as DOWN even on HTTP 200. Set to null to disable keyword verification.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_target

  Permanently delete a target and all its associated data (runs, findings, incidents, artifacts). This cannot be undone.

  Parameters:

  • targetId (required) — string — The target ID to delete
  • confirm (required) — boolean — Must be true to confirm deletion

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• analyze_target

  Fingerprint a URL and get test recommendations before creating a target. Detects platform (Shopify, WordPress, etc.), CDN, server stack, frontend framework, analytics, and B2B/ecommerce signals. Returns recommended tests with explanations. Use this before create_target to know what type to assign and which tests will be enabled.

  Parameters:

  • url (required) — string — URL to analyze, e.g. "https://example.com"

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• import_targets

  Bulk import up to 100 websites for monitoring. Each URL gets a target created with auto-enabled tests, initial scan, and screenshot capture. Partial success — failed URLs are reported individually without blocking others.

  Parameters:

  • items (required) — array — Array of targets to import

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_muting_rule

  Create a rule to auto-mute findings matching a pattern. Existing open findings matching the rule are muted immediately. Supports muting by fingerprint pattern, test definition, or test+target combination.

  Parameters:

  • scope (required) — string — FINGERPRINT: match by finding fingerprint substring. TEST_DEFINITION: mute all findings from a test. TEST_TARGET: mute findings from a specific test on a specific target.
  • reason — string — Reason for muting
  • targetId — string — Target ID to scope the rule to (required for TEST_TARGET, optional for others)
  • expiresAt — string — Optional expiry as ISO 8601 string. Rule auto-expires after this time.
  • testDefinitionId — string — Test definition ID (required for TEST_DEFINITION and TEST_TARGET scopes)
  • fingerprintPattern — string — Substring to match in finding fingerprints (required for FINGERPRINT scope)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• system_health

  Get a comprehensive system health report: BullMQ queue depths, active/stuck runs, user sessions, notification delivery stats, and recent error counts. Requires admin scope.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• update_test

  Enable or disable a test definition globally, or update its schedule/timeout. Requires admin scope.

  Parameters:

  • slug (required) — string — Test plugin slug (e.g. "http-protocol-check")
  • enabled — boolean — Enable or disable the test globally
  • timeout — number — Timeout in milliseconds
  • defaultSchedule — string — Cron schedule (e.g. "0 */6 * * *")

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• enable_all_tests

  Enable all test definitions globally. Optionally filter by category to only enable tests in that category. Requires admin scope.

  Parameters:

  • category — string — Only enable tests in this category. Omit to enable all.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• disable_all_tests

  Disable all test definitions globally. Optionally filter by category to only disable tests in that category. Requires admin scope.

  Parameters:

  • category — string — Only disable tests in this category. Omit to disable all.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.