Skip to content
anlyon.devby Anlyon

Argosor — Unified SEO, SERP, Clean Markdown & GEO (AI Citation Visibility) MCP Server

com.argosor/mcpargosor.comstreamable-httpv1.0.1Scanned

Unified 15-tool SEO, SERP, clean Markdown & GEO (LLM citation Share-of-Voice) MCP server.

15 tools: 11 change things and 4 only read.

Tools: 0 delete, 0 irreversible, 11 write, 4 read.
  • Reads private data · 1
  • Reads text others write · 10
  • Can send data out · 5
  • 9 findings

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

15 tools

Changes things 11Claude Code: ask
  • account_registerZero-browser autonomous workspace registration.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Zero-browser autonomous workspace registration. Creates a new Argosor account, relational workspace, and scoped API key (arg_live_...) in a single call, returning a magic console claim URL and $2.50 in free sandbox credits.

    Annotations the server declares

    • title: Zero-Browser Agent Workspace Registration
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • agent_crawler_traffic_attributionAudit a domain’s 3-tier AI crawler readiness—separating Training Crawlers (GPTBot, CCBot, Google-Extended), AI Search Indexers (OAI-SearchBot, PerplexityBot, Applebot-Extended), an…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Audit a domain’s 3-tier AI crawler readiness—separating Training Crawlers (GPTBot, CCBot, Google-Extended), AI Search Indexers (OAI-SearchBot, PerplexityBot, Applebot-Extended), and Live User-Triggered Agent Browsers (ChatGPT-User, Claude-Web, Perplexity-User)—verify edge WAF bot-spoofing behavior, and generate ready-to-paste GA4, Plausible, PostHog, and Nginx AI traffic attribution regex filters covering 15+ AI answer engines.

    Annotations the server declares

    • title: 3-Tier AI Crawler Readiness & GA4/Plausible/PostHog Attribution
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • billing_upgradeGenerate a Stripe Live Checkout session to upgrade the workspace plan (Starter $19/mo, Builder $39/mo, Scale $79/mo) or retrieve the Stripe Live catalog and Customer Billing Portal…Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "generate": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Generate a Stripe Live Checkout session to upgrade the workspace plan (Starter $19/mo, Builder $39/mo, Scale $79/mo) or retrieve the Stripe Live catalog and Customer Billing Portal URL.

    Annotations the server declares

    • title: Stripe Live Plan Upgrade & Checkout Session
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • cms_autopilot_and_gsc_syncClosed-loop SEO & GEO Autopilot, Google Search Console (GSC) rank decay heartbeat, Multi-CMS staging (WordPress, GitHub PR for Next.js/Astro, Webflow, Ghost, Shopify, custom webhoo…Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "cms_autopilot_and_gsc_sync" says "sync": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.targetUrl): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Closed-loop SEO & GEO Autopilot, Google Search Console (GSC) rank decay heartbeat, Multi-CMS staging (WordPress, GitHub PR for Next.js/Astro, Webflow, Ghost, Shopify, custom webhook), and Shared Action Board orchestrator (actions grouped by type and sorted by expected_clicks descending, assigned to Chief of SEO, Analyst, Writer, or Refresher, where night routines always stop at "Ready for review" for human approval).

    Annotations the server declares

    • title: Multi-CMS SEO/GEO Autopilot, GSC Heartbeat & Shared Action Board
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • competitor_gap_matrixBuild a multi-domain SEO and GEO competitive gap matrix comparing a primary domain against up to 5 competitors.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Build a multi-domain SEO and GEO competitive gap matrix comparing a primary domain against up to 5 competitors. Identifies high-volume, low-difficulty keyword gaps, AI Share-of-Voice disparities, unit cost benchmarks, and the highest-ROI comparison pages (/vs/*) to publish next.

    Annotations the server declares

    • title: Multi-Domain SEO & GEO Competitor Gap Matrix
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • geo_llm_visibility_auditRun a Generative Engine Optimization (GEO) and LLM Citation Share-of-Voice (SoV) audit across ChatGPT Search, Perplexity, Claude, Google AI Overviews, Gemini, and Grok.Reads text others write1 finding

    Why it is in this group

    • The description's first verb is "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "geo_llm_visibility_audit" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Run a Generative Engine Optimization (GEO) and LLM Citation Share-of-Voice (SoV) audit across ChatGPT Search, Perplexity, Claude, Google AI Overviews, Gemini, and Grok. Probes live domain signals (/llms.txt, Schema.org JSON-LD) and returns brand mention rate, citation rank, competitor displacement, and concrete recommendations to capture more AI citations.

    Annotations the server declares

    • title: GEO & Multi-LLM Citation Visibility Audit
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • geo_reputation_and_writerRun a 7-Dimension AI Brand Reputation & Narrative Audit (authority, trust & compliance, pricing value, technical depth, citation freshness, sentiment polarity, entity clarity) acro…Reads text others writeCan send data out1 finding

    Why it is in this group

    • The description's first verb is "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.targetUrl): a request to a URL can carry data to whoever runs it.

    Findings

    • Warn

      The server marks "geo_reputation_and_writer" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Run a 7-Dimension AI Brand Reputation & Narrative Audit (authority, trust & compliance, pricing value, technical depth, citation freshness, sentiment polarity, entity clarity) across live web, news, Hacker News, Wikipedia, and connected LLMs, and generate an Answer-First GEO Content & Markdown Twin Writer pack (Answer-First Markdown section, HTML comparison <table>, FAQPage JSON-LD, and Content-Signal robots.txt rule). Includes 6-hour response caching.

    Annotations the server declares

    • title: 7D AI Brand Reputation Audit & Answer-First GEO Writer
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • keyword_intent_clusterGenerate semantic keyword clusters with monthly search volume, CPC (USD), Keyword Difficulty (KD 0-100), buyer intent classification (commercial, transactional, informational, navi…1 finding

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "keyword_intent_cluster" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate semantic keyword clusters with monthly search volume, CPC (USD), Keyword Difficulty (KD 0-100), buyer intent classification (commercial, transactional, informational, navigational), and recommended pillar-and-spoke URL slugs for both organic search and LLM citation capture.

    Annotations the server declares

    • title: Semantic Keyword Intent & Pillar Clustering
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • schema_jsonld_generatorGenerate a validated, deterministic Schema.org JSON-LD @graph payload (SoftwareApplication, Organization, FAQPage, Article, Product, WebSite) ready to embed in HTML <head>.Can send data out1 finding

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Findings

    • Warn

      The server marks "schema_jsonld_generator" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate a validated, deterministic Schema.org JSON-LD @graph payload (SoftwareApplication, Organization, FAQPage, Article, Product, WebSite) ready to embed in HTML <head>. Maximizes eligibility for Google Rich Results and improves entity disambiguation inside LLM knowledge graphs.

    Annotations the server declares

    • title: Deterministic Schema.org JSON-LD Graph Generator
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • technical_seo_crawlPerform a live HTTP + HTML technical SEO and AI-crawler readiness audit on any URL.Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "technical_seo_crawl" says "crawl": it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Perform a live HTTP + HTML technical SEO and AI-crawler readiness audit on any URL. Inspects HTTP status, response latency, title, meta description, canonical tag, H1-H3 heading hierarchy, Schema.org JSON-LD blocks, robots.txt permissions for AI crawlers (GPTBot, ClaudeBot, PerplexityBot, Google-Extended), and /llms.txt availability.

    Annotations the server declares

    • title: Live Technical SEO & AI Crawler Readiness Audit
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 4Show 4 read-only tools
  • account_statusInspect the active Argosor workspace, plan tier (free, starter, builder, scale), remaining monthly query quota, USD credit ledger balance, minted API keys, and connected AES-256-GC…Reads private data2 findings

    Why it is in this group

    • The name "account_status" says "status": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "inspect" and "credential": it reads secrets.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...PI keys, and connected AES-256-GCM BYOK credentials."

      What this check looks for
    • Info

      The input schema at properties.includeByokVault.description mentions "credentials".

      Matched text

      inputSchema.properties.includeByokVault.description: "...hen true, lists encrypted BYOK provider credentials (DataForSEO, SerpApi, Ahrefs, Firecrawl..."

      What this check looks for
    Description, as the server wrote it
    Inspect the active Argosor workspace, plan tier (free, starter, builder, scale), remaining monthly query quota, USD credit ledger balance, minted API keys, and connected AES-256-GCM BYOK credentials.

    Annotations the server declares

    • title: Workspace Quota, BYOK Vault & Billing Status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • markdown_clean_extractFetch any live web URL and convert it into clean, boilerplate-free, LLM-ready Markdown for RAG pipelines and autonomous research agents.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "fetch" and "web": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Fetch any live web URL and convert it into clean, boilerplate-free, LLM-ready Markdown for RAG pipelines and autonomous research agents. Strips scripts, styles, ads, and navigation chrome while preserving heading hierarchy, lists, canonical links, token count, and SHA-256 content hash at 90% lower cost than legacy scrapers.

    Annotations the server declares

    • title: Live Web URL to Clean LLM Markdown Extractor
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • traffic_analyticsQuery real-time web, REST API, and MCP JSON-RPC traffic attribution telemetry across acquisition channels, AI agent harnesses (Cursor, Claude, Grok, OpenClaw), MCP tools, and count…Reads text others write1 finding

    Why it is in this group

    • The description's first verb is "query": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "query" and "web": it reads web pages, which anyone can write.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: ".... Restricted to Allometrik master admin credentials."

      What this check looks for
    Description, as the server wrote it
    Query real-time web, REST API, and MCP JSON-RPC traffic attribution telemetry across acquisition channels, AI agent harnesses (Cursor, Claude, Grok, OpenClaw), MCP tools, and countries. Restricted to Allometrik master admin credentials.

    Annotations the server declares

    • title: Admin Traffic & MCP Attribution Telemetry
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

50 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 private-data tool breaks every one.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write10
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out5
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__argosor__account_status"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

5 warn4 info
  • Warnserp_live_search

    The server marks "serp_live_search" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "serp_live_search" says "search": a word for reading.

    What this check looks for
  • Warngeo_llm_visibility_audit

    The server marks "geo_llm_visibility_audit" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.

    What this check looks for
  • Warnkeyword_intent_cluster

    The server marks "keyword_intent_cluster" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "generate": a word for a change.

    What this check looks for
  • Warnschema_jsonld_generator

    The server marks "schema_jsonld_generator" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "generate": a word for a change.

    What this check looks for
  • Warngeo_reputation_and_writer

    The server marks "geo_reputation_and_writer" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.

    What this check looks for
  • Infoserp_live_search

    The input schema at properties.executionMode.description mentions "credentials".

    Matched text

    inputSchema.properties.executionMode.description: "..."byok" ($0 markup using encrypted vault credentials). Defaults to "managed"."

    What this check looks for
Show 3 more findings

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http argosor https://mcp.argosor.com/mcp
claude mcp add --transport http argosor https://mcp.argosor.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__argosor__backlink_authority_graph",
      "mcp__argosor__account_status",
      "mcp__argosor__traffic_analytics"
    ],
    "ask": [
      "mcp__argosor__serp_live_search",
      "mcp__argosor__geo_llm_visibility_audit",
      "mcp__argosor__technical_seo_crawl",
      "mcp__argosor__keyword_intent_cluster",
      "mcp__argosor__markdown_clean_extract",
      "mcp__argosor__competitor_gap_matrix",
      "mcp__argosor__schema_jsonld_generator",
      "mcp__argosor__account_register",
      "mcp__argosor__billing_upgrade",
      "mcp__argosor__geo_reputation_and_writer",
      "mcp__argosor__agent_crawler_traffic_attribution",
      "mcp__argosor__cms_autopilot_and_gsc_sync"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as argosor. Review it before you use it.

Capability tags behind 12 rules
  • mcp__argosor__serp_live_search untrusted-input
  • mcp__argosor__geo_llm_visibility_audit untrusted-input
  • mcp__argosor__technical_seo_crawl untrusted-input, outbound
  • mcp__argosor__backlink_authority_graph untrusted-input
  • mcp__argosor__markdown_clean_extract untrusted-input, outbound
  • mcp__argosor__schema_jsonld_generator outbound
  • mcp__argosor__account_status private-data
  • mcp__argosor__billing_upgrade untrusted-input
  • mcp__argosor__traffic_analytics untrusted-input
  • mcp__argosor__geo_reputation_and_writer untrusted-input, outbound
  • mcp__argosor__agent_crawler_traffic_attribution untrusted-input
  • mcp__argosor__cms_autopilot_and_gsc_sync untrusted-input, outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.argosor/mcp/verify?hash=038dc9891c469285a7af12ddcff03903cac62971a13d9896905df120b99e419b" | jq -e '.changed == false'

Pinned hash 038dc9891c46, from Oct 27, 2026, 16:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.argosor/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.argosor/mcp
[![anlyon.dev](https://anlyon.dev/badge/com.argosor/mcp.svg)](https://anlyon.dev/servers/com.argosor/mcp)

Source: MCP Registry. Synced Oct 27, 2026, 16:17 UTC.