212medya Growth Check
tr.com.212medya/growth-check212medya.com.trstreamable-httpv1.0.0Scanned
Audit a public website for B2B marketing readiness and AI search visibility.
3 tools: 1 can delete or cancel things, 1 change things and 1 only read.
- Reads private data · 1
- Reads text others write · 3
- Can send data out · 2
- No findings
Anlyon alternative
2 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
3 tools
Deletes or cancels 1Claude Code: deny
request_expert_reviewUse this only when the user explicitly asks to be contacted by 212medya, the digital marketing agency that publishes this app — for example to get help fixing audit findings or a p…Reads text others writeNo findings
Why it is in this group
- The name "request_expert_review" says "request": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Use this only when the user explicitly asks to be contacted by 212medya, the digital marketing agency that publishes this app — for example to get help fixing audit findings or a proposal for SEO, AI search visibility, ads, web design or international marketing. Before calling, show the user exactly which details will be sent (name, email, company, optional website and phone, topic, message) and get their confirmation. The details are emailed to 212medya's team and stored in 212medya's lead database; a specialist replies by email. Each call sends a new request, so do not retry after a success. Do not use it to save or share audit results, or when the user only wants information.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
Changes things 1Claude Code: ask
audit_websiteUse this when the user wants a marketing audit of a public website, especially a B2B, manufacturer, exporter or service-business site: technical SEO, mobile performance (Google Pag…Reads text others writeCan send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it Use this when the user wants a marketing audit of a public website, especially a B2B, manufacturer, exporter or service-business site: technical SEO, mobile performance (Google PageSpeed Insights), lead conversion (quote/contact forms, calls to action, click-to-call), trust signals (references, certifications, privacy policy, cookie consent), analytics and ad tracking tags, and language versions for target export markets. It fetches only the given page plus robots.txt and the sitemap, honors robots.txt, and returns category scores and prioritized fixes in English. Results for the same page are cached for up to 6 hours. Do not use it for AI crawler or AI search questions (use check_ai_search_readiness), for pages behind a login, or to monitor sites the user is not evaluating.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
Only reads 1Show 1 read-only tool
check_ai_search_readinessUse this when the user asks whether a public website can be crawled, read and cited by AI assistants and AI search (ChatGPT search, Google AI Overviews, Bing/Copilot, Perplexity, C…Reads private dataReads text others writeCan send data outNo findings
Why it is in this group
- The name "check_ai_search_readiness" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "chat": it reads messages.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "website": it reads web pages, which anyone can write.
- untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Claude Code: ask, because it is tagged outbound.
Description, as the server wrote it Use this when the user asks whether a public website can be crawled, read and cited by AI assistants and AI search (ChatGPT search, Google AI Overviews, Bing/Copilot, Perplexity, Claude), or why AI tools do not show their company. It checks robots.txt rules for each AI crawler, Content-Signal directives, noindex/nosnippet restrictions, whether content is readable without JavaScript, FAQ content, Organization schema and sameAs links, the sitemap and llms.txt, and returns scores, a crawler access table and prioritized fixes in English. It does not measure how often the brand is actually mentioned in AI answers and does not test CDN or firewall bot blocking. Do not use it for general SEO or conversion audits (use audit_website).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
6 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 private-data tool breaks every one.
- Reads private data1
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write3
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out2
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
{
"permissions": {
"deny": [
"mcp__growth-check__check_ai_search_readiness"
]
}
}Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http growth-check https://212medya.com.tr/mcpclaude mcp add --transport http growth-check https://212medya.com.tr/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [],
"ask": [
"mcp__growth-check__audit_website",
"mcp__growth-check__check_ai_search_readiness"
],
"deny": [
"mcp__growth-check__request_expert_review"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as growth-check. Review it before you use it.
Capability tags behind 3 rules
- mcp__growth-check__audit_website untrusted-input, outbound
- mcp__growth-check__check_ai_search_readiness private-data, untrusted-input, outbound
- mcp__growth-check__request_expert_review untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/tr.com.212medya/growth-check/verify?hash=2900ae1cc1c81eeb954a5e5bf6e156f297877f0c8464353f568a55c7b472685e" | jq -e '.changed == false'Pinned hash 2900ae1cc1c8, from Nov 3, 2026, 11:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/tr.com.212medya/growth-check/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/tr.com.212medya/growth-check)Source: MCP Registry. Synced Nov 3, 2026, 11:18 UTC.