OnPage.dev
by onpage.dev · remote · no sign-in to list tools · v2.14.0 · published by dev.onpage
Free SEO MCP that closes the loop: find, fix, ship as a PR or to a CMS, prove. 37 tools, no key.
37 tools: 2 do something that can't be undone, 32 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone2Claude Code: ask: see these tools
- Changes things32Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http onpage https://onpage.dev/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnget_fix_pack
The server marks "get_fix_pack" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_fix_pack" says "get": a word for reading.
- Warnfix_log
The server marks "fix_log" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "fix_log" says "log": a word for reading.
- Warncheck_links
The server marks "check_links" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "check_links" says "link": a word for a change.
- Warninternal_links
The server marks "internal_links" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "internal_links" says "link": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
37 tools
Can't be undone 2Claude Code: ask
dashboardA daily SEO data feed for key pages and a live dashboard in the chat.No findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
Description, as the server wrote it A daily SEO data feed for key pages and a live dashboard in the chat. Pick with mode: feed = Start a daily feed of key pages; returns feed_id. Needs url. data = The feed as clean tables over time. Needs feed_id, dataset. build = Blueprint for a live SEO command center with realtime GA4 visitors. Needs feed_id.
Annotations the server declares
- title: SEO dashboard
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Changes things 32Claude Code: ask
accessibilityAccessibility for people and the European Accessibility Act.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Accessibility for people and the European Accessibility Act. Pick with mode: wcag = WCAG 2.1 AA checks. Needs url. screen_reader = The page as a screen reader reads it. Needs url.
Annotations the server declares
- title: Accessibility
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
ai_visibilityWhether AI assistants can read, quote and recommend a site.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Whether AI assistants can read, quote and recommend a site. Pick with mode: check = AI crawler access, llms.txt, 15 citability checks and the page as a model reads it. Needs url. bots = Fetch the page as Googlebot, GPTBot, ClaudeBot, PerplexityBot and more against a browser: firewall blocks, challenges, cloaking. Needs url. gaps = Where AI answers name competitors, not you, from Brand Radar or similar. Needs site, brand, responses[{question, response, links, search_queries, engine, volume}]. citations = What pages cited by AI do differently, from citation counts. Needs pages[{url, chatgpt, perplexity, gemini, google_ai_overviews, google_ai_mode}].
Annotations the server declares
- title: AI visibility
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
answer_readinessWhether a page answers the questions people ask AI and Google.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Whether a page answers the questions people ask AI and Google. Pick with mode: questions = Sub-questions AI Mode fans out to, and which the page answers. Needs url, topic, questions. passages = The passages that answer given questions, or the gaps. Needs url, question. format = Answer format against the pages that rank. Needs url, question, competitors.
Annotations the server declares
- title: Answers for AI search
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
backlinksTurn backlink data from Ahrefs, Semrush or similar into links won back, won or cleaned up.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Turn backlink data from Ahrefs, Semrush or similar into links won back, won or cleaned up. Pick with mode: broken = Broken and lost backlinks and 404 visits into 301s and outreach. Needs rows[{target_url, source_url, anchor, domain_rating, dofollow, http_code}]. opportunities = Sites linking to competitors, and unlinked brand mentions. Needs site. outreach = One outreach email per site, as drafts for the user's mail after approval. Needs your_site, prospects[{page, type, your_url, dead_url, anchor, contact}]. disavow = A conservative disavow.txt, only after a manual action or clear negative SEO. Needs rows[{url_from, domain, is_spam, domain_rating, anchor, traffic}], reason.
Annotations the server declares
- title: Backlinks
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_keywordHow pages target a keyword.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it How pages target a keyword. Pick with mode: focus = One page against one keyword: 8 checks. Needs url, keyword. cannibalization = Your pages competing for one keyword, side by side on every signal, with the plan. Needs keyword, target_url.
Annotations the server declares
- title: Keyword targeting
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_linksStatus of URLs and links.1 finding
Why it is in this group
- The name "check_links" says "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "check_links" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "check_links" says "link": a word for a change.
Description, as the server wrote it Status of URLs and links. Pick with mode: urls = Status, redirect chain and canonical of a list of URLs. Needs urls. outbound = Dead or moved links from a page to other sites, with archived copies. Needs url.
Annotations the server declares
- title: Check links
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
contentWhat to write and how, in the site's own voice, from the pages that rank and the user's search data.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it What to write and how, in the site's own voice, from the pages that rank and the user's search data. Pick with mode: brief = A content brief from the pages that rank. Needs keyword, competitors. topics = Search Console queries into topics, with the page that owns each, and keyword gaps. Needs rows[{query, page, clicks, impressions, position, url}]. intent = Your page against the search intent of the pages that rank. voice = Learn how the site writes from its best articles. Needs urls. calendar = A dated calendar of refreshes and new pages, steered by what worked here. draft = A draft against the site's voice, sources and SEO, before approval. Needs html.
Annotations the server declares
- title: Content strategy
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
edge_workerFixes applied at the edge on the user's own Cloudflare, on any CMS.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Fixes applied at the edge on the user's own Cloudflare, on any CMS. Pick with mode: rules = One Worker that fixes a whole section by rules. Needs audit_id. prerender = Serve rendered HTML to AI crawlers for JavaScript apps. Needs url.
Annotations the server declares
- title: Cloudflare Workers
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
entityHow Google understands who is behind a site.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it How Google understands who is behind a site. Pick with mode: graph = Organization, sameAs, logo and founder in structured data. Needs url. trust = Author, about, contact and policy signals. Needs url.
Annotations the server declares
- title: Entity and trust
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
fix_logRecord shipped fixes, keep them live and report on them.1 finding
Why it is in this group
- The name "fix_log" says "log": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "fix_log" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "fix_log" says "log": a word for reading.
Description, as the server wrote it Record shipped fixes, keep them live and report on them. Pick with mode: log = Record a shipped fix; checked every 6 hours, restore code on regression. Needs fixes[{url, field, new, old, via, ref}]. report = Every fix with status and results: a monthly client report. Needs fix_log_id.
Annotations the server declares
- title: Fix log
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_fix_packFixes ready to ship: as code, for a CMS through its MCP, as a pull request or at the edge.1 finding
Why it is in this group
- The name "get_fix_pack" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "get_fix_pack" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_fix_pack" says "get": a word for reading.
Description, as the server wrote it Fixes ready to ship: as code, for a CMS through its MCP, as a pull request or at the edge. Pick with mode: fixes = Title, description, canonical, social tags, JSON-LD; platform html, wordpress, shopify, webflow, wix, storyblok, sanity, contentful, strapi, ghost, magento, git or cloudflare. Needs url. alt_texts = Write and ship missing alt texts. Needs url. web_vitals = Speed fixes as tags, WordPress steps or a Worker. Needs url. wordpress = Send fixes, new drafts and post updates to the OnPage.dev WordPress plugin for one-click approval and undo. Needs site_key.
Annotations the server declares
- title: Fixes as code
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
internal_linksInternal links and link equity.1 finding
Why it is in this group
- The name "internal_links" says "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "internal_links" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "internal_links" says "link": a word for a change.
Description, as the server wrote it Internal links and link equity. Pick with mode: suggest = Links to add, with anchors, applied by Worker or CMS. Needs audit_id. equity = Internal PageRank and click depth from a site audit. Needs audit_id.
Annotations the server declares
- title: Internal links
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
layoutWhat visitors and crawlers see on every screen size.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it What visitors and crawlers see on every screen size. Pick with mode: render = First screen on phone, tablet and desktop in a real browser, and what crawlers without JavaScript get (default). Needs url. probe = A measurement script to run in the user's own browser tool. analyze = Analyse the results of that script. Needs url, results.
Annotations the server declares
- title: Layout and first screen
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
llms_txtThe llms.txt file for AI assistants.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it The llms.txt file for AI assistants. Pick with mode: generate = Write one from the sitemap and home page. Needs url. validate = Check an existing one and its links. Needs url.
Annotations the server declares
- title: llms.txt
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
localLocal search: the site, the Business Profile and the map.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Local search: the site, the Business Profile and the map. Pick with mode: check = LocalBusiness markup, NAP, locations and the Business Profile (default). Needs url. reviews = Reply drafts for Google reviews, unhappy ones first, for the user's GBP connector after approval. Needs reviews[{rating, author, text, date, replied, review_id}]. demand = Business Profile search terms and geo-grid ranks into new service and location pages.
Annotations the server declares
- title: Local SEO
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
measureProve and measure with numbers from the user's Search Console, GA4, Ahrefs or Semrush, including numbers the user pastes.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prove and measure with numbers from the user's Search Console, GA4, Ahrefs or Semrush, including numbers the user pastes. Use it instead of calculating by hand: it handles spelling variants, control groups and trends. Pick with mode: impact = Before and after fixes, against pages you did not touch. Needs pages[{url, before, after, changed, fix}]. ai_citations = AI citations before and after, per engine. Needs pages[{url, before, after, changed}]. ai_referrals = Visits from ChatGPT, Perplexity, Gemini and other assistants, from GA4. Needs rows[{source, sessions, landing_page, period, conversions, revenue}]. brand_split = Brand versus non-brand clicks and how each moved. Needs brand_terms, rows[{query, keyword, clicks, traffic, impressions, position}]. share_of_voice = Share of the clicks against competitors from rank rows. Needs your_domain, rows[{keyword, position, volume, domain, url, group}].
Annotations the server declares
- title: Measure results
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
planPlans for migrations, experiments and the team.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Plans for migrations, experiments and the team. Pick with mode: redirects = Redirect map for a migration or URL change. split_test = SEO split test on a page template, with the Worker. Needs urls, field, pattern. sprint = Fixes into a week plan of tickets per role. Needs fixes[{title, url, detail, severity, impact, effort}].
Annotations the server declares
- title: Plan the work
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
prioritize_fixesUse when Search Console, GA4, Ahrefs or Semrush data is available, also to explain a traffic drop (pass clicks_previous): ranks the fixes by the traffic or revenue they can win.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use when Search Console, GA4, Ahrefs or Semrush data is available, also to explain a traffic drop (pass clicks_previous): ranks the fixes by the traffic or revenue they can win. Rank SEO fixes by how much traffic they can win, using data from the user's other connected tools. With GA4, also pass each page's organic conversions (key events) or revenue, and fixes are ranked by the money they can bring instead of clicks.
Annotations the server declares
- title: Prioritize fixes
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
request_recrawlGet changed pages recrawled.No findings
Why it is in this group
- The name "request_recrawl" says "request": a word for a change.
Description, as the server wrote it Get changed pages recrawled. Pick with mode: recrawl = Check pages are indexable, sitemap lastmod entries, IndexNow and Search Console steps (default). Needs urls. indexnow = Submit URLs to IndexNow, or set up the key. Needs urls.
Annotations the server declares
- title: Recrawl
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
robots_txtrobots.txt for search and AI crawlers.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it robots.txt for search and AI crawlers. Pick with mode: test = Which crawlers may fetch a URL, and the rule that decides. Needs url. ai_policy = Rules per AI crawler: allow AI search, block training. Needs url, policy.
Annotations the server declares
- title: robots.txt
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
scan_pageScan a page for Google and AI search: 0-100 score, issues to fix first with why and how, AI readiness and key facts.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Scan a page for Google and AI search: 0-100 score, issues to fix first with why and how, AI readiness and key facts. Pick with mode: page = A live page by url (default). Needs url. html = Unpublished HTML before deploy, to gate a release. Needs html. deep = Everything measured on one page, by section. Needs url. rescan = Scan again after fixes and compare with the last scan. Needs url.
Annotations the server declares
- title: SEO and AI scan
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
schemaJSON-LD structured data for rich results.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it JSON-LD structured data for rich results. Pick with mode: generate = Write JSON-LD for a page: type Article, Product, FAQPage, Organization, BreadcrumbList, VideoObject, Event, Recipe, JobPosting, SoftwareApplication, ProfilePage or Course. Needs url. validate = Validate JSON-LD for rich results. Needs jsonld. product_page = Check an existing ecommerce product page (price, stock, merchant listing fields). To write Product JSON-LD use generate with type Product. Needs url.
Annotations the server declares
- title: Structured data
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
site_auditAudit a whole site, step by step, and work with the result.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Audit a whole site, step by step, and work with the result. Pick with mode: start = Start an audit of up to 25 pages; returns audit_id. Needs url. continue = Scan the next pages; call until complete. Issues by code, sections, average score. Needs audit_id. import = Turn a crawl from Screaming Frog, Ahrefs or Semrush (up to 500 pages) into an audit_id. Needs pages[{url, status, redirect_to, title, meta_description, h1}]. compare = What changed since the last audit, or against a competitor audit. Needs audit_id. report = A client-ready report page with a link. Needs audit_id.
Annotations the server declares
- title: Whole-site audit
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
site_memoryA memory per site that every OnPage.dev tool writes to, across chats and clients.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it A memory per site that every OnPage.dev tool writes to, across chats and clients. Open it first when working on a site over time. Pick with mode: open = Open or create the memory, bind it to this chat, get the brief and next steps (default). Needs url. next = The best next steps from everything recorded. timeline = What happened, newest first. note = Record a decision or context. Needs note. forget = Delete the memory (ask the user first). Needs memory_key.
Annotations the server declares
- title: Site memory
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
sitemapThe XML sitemap.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it The XML sitemap. Pick with mode: check = Check the sitemap and a sample of its URLs. Needs url. generate = Write a sitemap from a page list or audit. Needs audit_id.
Annotations the server declares
- title: XML sitemap
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
snippetHow a page looks in Google and when shared, measured in pixels the way Google truncates.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it How a page looks in Google and when shared, measured in pixels the way Google truncates. Use it instead of estimating title or description length. Pick with mode: search = Title and description as Google shows them; give title (and description) or a url to read them. social = Open Graph and X cards, and the share image. Needs url.
Annotations the server declares
- title: Snippets and share cards
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
technicalTechnical checks across pages and logs.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Technical checks across pages and logs. Pick with mode: hreflang = Hreflang across language versions, with the corrected tag set. Needs url. parameters = URL parameters and filters that waste crawl budget. duplicates = Duplicate and near-duplicate pages. Needs audit_id. extract = One value pulled from many pages. Needs urls. logs = Access logs: what Googlebot and AI crawlers really crawl, with IP verification. Needs log.
Annotations the server declares
- title: Technical SEO
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
text_qualityReadability and correct language.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Readability and correct language. Pick with mode: readability = Readability that fits the page and the pages that rank. Needs url. spelling = Spelling and grammar errors in about 30 languages. Needs url.
Annotations the server declares
- title: Text quality
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
track_rankingsUse for ongoing rank tracking without picking keywords by hand.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Use for ongoing rank tracking without picking keywords by hand. Each run, fetch Search Console rows by query and page (last 7 or 28 days) and, if connected, the rows of Ahrefs Rank Tracker (rank-tracker-overview) or Semrush Position Tracking, plus GA4 conversions or revenue per landing page if available, and pass them with the tracker_id (leave it out on the first run to create a tracker).
Annotations the server declares
- title: Track rankings
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
trackingWhether analytics and consent are set up right, and whether the numbers add up.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Whether analytics and consent are set up right, and whether the numbers add up. Pick with mode: ga4 = GA4 tags, events and duplicates. Needs url. consent = Cookie banner and Consent Mode v2. Needs url. gsc_vs_ga4 = Search Console clicks against GA4 sessions per page: broken or filtered tracking. Needs gsc[{page, clicks}], ga4[{landing_page, sessions}].
Annotations the server declares
- title: Tracking and consent
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
watchMonitoring that runs on its own and posts changes to a webhook.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Monitoring that runs on its own and posts changes to a webhook. Each kind takes action create (default), status or stop where it applies. Pick with mode: page = Watch one page (or a competitor page with competitor_of) for SEO changes. Needs url. page_status = Latest result of a page watch. Needs watch_id. page_stop = Stop a page watch. Needs watch_id. site_audit = Audit the whole site every 1, 7 or 30 days and alert on regressions. guard = Every 6 hours: robots.txt, sitemap, https, noindex and canonical on key pages, for deploy accidents. competitors = Weekly new, updated and removed pages from competitors' sitemaps, flagged by your topics.
Annotations the server declares
- title: Keep watching
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
web_vitalsCore Web Vitals from real Chrome users.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Core Web Vitals from real Chrome users. Pick with mode: now = The latest field data for a page or site. Needs url. trend = Weekly history, before and after a change date. Needs url.
Annotations the server declares
- title: Core Web Vitals
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Only reads 3Claude Code: allow
compareCompare pages side by side.No findings
Why it is in this group
- The name "compare" says "compare": a word for reading.
Description, as the server wrote it Compare pages side by side. Pick with mode: pages = Your page against up to 3 competitors. Needs url, competitors. html = Two versions of HTML before and after. Needs before, after. preview = Deploy preview against production before merging. Needs preview_url, production_url.
Annotations the server declares
- title: Compare
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
explain_googleExplain what Google Search Console and Bing Webmaster Tools report, and what to do.No findings
Why it is in this group
- The name "explain_google" says "explain": a word for reading.
Description, as the server wrote it Explain what Google Search Console and Bing Webmaster Tools report, and what to do. Pick with mode: index_status = Index coverage and rich result statuses, with the fix. Needs rows[{url, coverageState, verdict, indexingState, robotsTxtState, pageFetchState}]. manual_action = A manual action, with the cleanup plan and reconsideration draft. Needs action. bing = Bing Webmaster crawl issues, and Bing against Google per query.
Annotations the server declares
- title: Explain Google and Bing
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
find_opportunitiesTurn Search Console, GA4 or Ahrefs rows (also rows the user pastes) into the fastest wins, instead of judging them by hand; content_decay and traffic_drop take search_type for Disc…No findings
Why it is in this group
- The name "find_opportunities" says "find": a word for reading.
Description, as the server wrote it Turn Search Console, GA4 or Ahrefs rows (also rows the user pastes) into the fastest wins, instead of judging them by hand; content_decay and traffic_drop take search_type for Discover, News, Image or Video rows. Pick with mode: ctr_gaps = Page 1 results with a click-through rate far below normal. Needs rows[{position, page, query, clicks, impressions, ctr}]. striking_distance = Queries at positions 8 to 20 worth a push. Needs rows[{position, page, query, clicks, impressions, ctr}]. content_decay = Pages slowly losing clicks over months: a refresh queue. Needs rows[{url, month, clicks}]. traffic_drop = Explain a drop page by page, by device and country. Needs rows[{url, before, after, query, device, country}]. prune = Keep, refresh, merge (301), noindex or remove (410) per page. Needs rows[{url, clicks, impressions, conversions, referring_domains, inlinks}]. discover = Readiness for Google Discover and News, with Discover or News rows. paid_organic = Google Ads terms against Search Console: ad spend you can test cutting, content to write. Needs ads[{term, cost, clicks, conversions}], gsc[{query, position, clicks, page}]. anomalies = Spike and drop days in daily rows, with Google updates near them. Needs rows[{date, clicks, impressions, page}]. ai_queries = Question and prompt-style queries per page, for AI answers. Needs rows[{query, page, clicks, impressions, position}].
Annotations the server declares
- title: Find search opportunities
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 2.14.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http onpage https://onpage.dev/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__onpage__find_opportunities",
"mcp__onpage__explain_google",
"mcp__onpage__compare"
],
"ask": [
"mcp__onpage__site_memory",
"mcp__onpage__scan_page",
"mcp__onpage__site_audit",
"mcp__onpage__watch",
"mcp__onpage__dashboard",
"mcp__onpage__measure",
"mcp__onpage__backlinks",
"mcp__onpage__ai_visibility",
"mcp__onpage__answer_readiness",
"mcp__onpage__get_fix_pack",
"mcp__onpage__edge_worker",
"mcp__onpage__fix_log",
"mcp__onpage__request_recrawl",
"mcp__onpage__check_keyword",
"mcp__onpage__accessibility",
"mcp__onpage__local",
"mcp__onpage__tracking",
"mcp__onpage__check_links",
"mcp__onpage__web_vitals",
"mcp__onpage__share",
"mcp__onpage__plan",
"mcp__onpage__content",
"mcp__onpage__technical",
"mcp__onpage__llms_txt",
"mcp__onpage__schema",
"mcp__onpage__robots_txt",
"mcp__onpage__sitemap",
"mcp__onpage__layout",
"mcp__onpage__internal_links",
"mcp__onpage__snippet",
"mcp__onpage__entity",
"mcp__onpage__text_quality",
"mcp__onpage__track_rankings",
"mcp__onpage__prioritize_fixes"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as onpage. Review it before you use it.