MCP serverPreview
Ask an AI assistant which pages need attention, what changed since the last audit, or how to fix a finding. It reads the same data as this app, through the Model Context Protocol.
Prototype: the endpoint below is the planned address and is not live. The tools, scopes and log show the intended design.
Connection
Streamable HTTP with OAuth 2.1. Each person signs in; a token sees one workspace.
- Endpoint
https://mcp.metricevo.com/mcp- Status
- Not live
- Default scope
audits:read- Optional scope
audits:write· every write asks for approval
Client configuration
{
"mcpServers": {
"metricevo": {
"url": "https://mcp.metricevo.com/mcp"
}
}
}Tools
7 tools. All but one are read-only.
| Tool | Arguments | Scope | Approval |
|---|---|---|---|
list_sitesSites in the workspace with source, stack and last audit. | — | audits:read | No |
get_latest_auditLatest run for a site: status, area summaries, findings. | site | audits:read | No |
list_findingsOpen findings, filtered by site, area or minimum priority. | site?, area?, min_priority? | audits:read | No |
get_priority_pagesPages ranked from Search Console and Analytics, with the deep-audit set. | site, limit? | audits:read | No |
compare_runsChanges against the previous run, noise bands applied. | site | audits:read | No |
get_fix_cardStack-aware fix card with owner, risk and verification. | site, rule_id | audits:read | No |
start_auditQueue an audit for an allowed site. Runs the URL policy. | url | audits:write | Asks the user |
Example call
Built from the same ranking as Priority pages.
Request
{
"tool": "get_priority_pages",
"arguments": {
"site": "northwind-dental"
}
}Response (first 3 pages)
{
"site": "northwind-dental.example",
"deepAuditPages": 5,
"pages": [
{
"path": "/",
"score": 69,
"tier": "high",
"reasons": [
"High traffic",
"Top search page"
]
},
{
"path": "/booking",
"score": 50,
"tier": "high",
"reasons": [
"Drives key events",
"Marked as key page"
]
},
{
"path": "/emergency",
"score": 34,
"tier": "medium",
"reasons": [
"Marked as key page"
]
}
]
}Guardrails
- Read-only by default. Writing needs the audits:write scope and the user’s approval in the client.
- OAuth 2.1 per user. Each token sees one workspace only.
- Page text from audited sites is returned as quoted data, marked untrusted, never as instructions.
- No raw cookie values, session data or personal data in any response.
- Rate limited per token. Every call is written to the workspace audit log.
Recent activity
Sample log. In the product every call is recorded per workspace.
| Time | Client | Tool | Result |
|---|---|---|---|
| 11 Nov 2026, 07:12 | Claude | get_priority_pages | northwind-dental · 5 pages |
| 11 Nov 2026, 07:11 | Claude | list_findings | min_priority=high · 4 findings |
| 11 Nov 2026, 07:10 | Claude | start_audit | Waiting for approval |
| 10 Nov 2026, 16:45 | Cursor | get_fix_card | harbor-goods · marketing.canonical |