RegSentry Website Tracking Inspector
by regsentry.com · remote · no sign-in to list tools · v1.0.0 · published by com.regsentry
Inspect a public site's tracking signals, grade consent evidence, and get remediation playbooks.
6 tools: 2 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http tracking-inspector https://regsentry.com/mcpFindings
Matches of fixed checks, with the text they matched.
The description mentions "credentials".
What this check looks forMatched text
description: "...uttons. Blocks non-GET requests, forms, credentials and persistence; reports missing contro..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
6 tools
Changes things 2Claude Code: ask
export_consent_reportFormats a supplied RegSentry runtime snapshot as a private plain-text report with its date, method, phase results and limitations.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Formats a supplied RegSentry runtime snapshot as a private plain-text report with its date, method, phase results and limitations. Returns file content without publishing, sharing, or storing it. Does not turn supplied evidence into a compliance certificate or legal opinion.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
interpret_consent_evidenceDeterministically grades a redacted set of tracker-request observations by consent phase.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Deterministically grades a redacted set of tracker-request observations by consent phase. It computes from the supplied data only, stores nothing, and returns a technical—not legal—interpretation.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
Only reads 4Claude Code: allow
compare_consent_observationsCompares two supplied RegSentry runtime snapshots of the same domain, phase by phase.No findings
Why it is in this group
- The name "compare_consent_observations" says "compare": a word for reading.
Description, as the server wrote it Compares two supplied RegSentry runtime snapshots of the same domain, phase by phase. Marks missing controls and incomplete observations unresolved. Reports newly observed or no-longer-observed tracker attempts without claiming causation, compliance or a verified fix. Stores nothing and makes no network requests.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
get_remediation_playbookReturns deterministic, tracker-specific consent-gating guidance from RegSentry's maintained playbooks.No findings
Why it is in this group
- The name "get_remediation_playbook" says "get": a word for reading.
Description, as the server wrote it Returns deterministic, tracker-specific consent-gating guidance from RegSentry's maintained playbooks. It does not change a website, contact a vendor, or verify that a fix was implemented.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
inspect_runtime_consentVisits an authorized public homepage in three isolated browser sessions and records known tracker request attempts before consent and after exact reject-all or accept-all buttons.1 finding
Why it is in this group
- The name "inspect_runtime_consent" says "inspect": a word for reading.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...uttons. Blocks non-GET requests, forms, credentials and persistence; reports missing contro..."
Description, as the server wrote it Visits an authorized public homepage in three isolated browser sessions and records known tracker request attempts before consent and after exact reject-all or accept-all buttons. Blocks non-GET requests, forms, credentials and persistence; reports missing controls and incomplete runs explicitly. Changes only temporary browser consent state. Bounded observations are not proof of transmission, compliance or a violation.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
inspect_site_trackingPerforms a bounded, non-persisting GET of an authorized public domain's homepage and reports tracker markup, consent setup signals, and runtime-verification gaps.No findings
Why it is in this group
- The name "inspect_site_tracking" says "inspect": a word for reading.
Description, as the server wrote it Performs a bounded, non-persisting GET of an authorized public domain's homepage and reports tracker markup, consent setup signals, and runtime-verification gaps. It does not run JavaScript, submit forms, create a RegSentry record, or make a legal determination.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http tracking-inspector https://regsentry.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__tracking-inspector__inspect_site_tracking",
"mcp__tracking-inspector__get_remediation_playbook",
"mcp__tracking-inspector__inspect_runtime_consent",
"mcp__tracking-inspector__compare_consent_observations"
],
"ask": [
"mcp__tracking-inspector__interpret_consent_evidence",
"mcp__tracking-inspector__export_consent_report"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as tracking-inspector. Review it before you use it.