CertScore.ai MCP Light is now available
By CertScore.ai
CertScore.ai website privacy scanning is now available directly to AI agents — with no account, API key, or OAuth required.
MCP Light is a deliberately simple public MCP interface for low-volume website privacy scanning. It makes CertScore.ai’s evidence-backed public website observations available inside agent workflows without requiring credential setup.
The launch keeps the workflow focused: start or reuse a scan, check its status when work is still active, then retrieve a bounded result bundle with findings, evidence references, limitations, and the full CertScore.ai report URL where available.
September 14, 2026 update
MCP Light now also provides paginated report evidence alongside its original scan, status and bundle workflow. Hosted MCP OAuth adds an authenticated workspace connection. See the current developer documentation for availability and setup.
Primary sources:Current MCP documentationHosted MCP OAuth release
What’s new
- No account, API key, or OAuth is required.
- A public Streamable HTTP MCP endpoint works with MCP-capable agents and clients.
- Three focused tools cover scan creation, active-status checks, and result retrieval.
- Eligible recent scans can be reused instead of starting unnecessary new work.
- Results link back to the full CertScore.ai report when a report is available.
Why it matters
Agents can bring public website privacy observations into a review workflow without asking a user to create credentials first. That makes MCP Light useful for evaluation, discovery, and occasional evidence gathering.
The output remains grounded in CertScore.ai’s existing product posture: automated observations for human and agentic review, not legal advice, certification, or a compliance determination.
How it works
Depending on the retained evidence, observations can include cookies and browser storage, trackers and vendors, consent or CMP behavior, privacy-policy surfaces, and related public website signals. Coverage limitations travel with the result and should be reviewed with the evidence.
- 1Call certscore_scan_site with a public HTTP or HTTPS URL.
- 2If the scan is still active and a scanId was returned, call certscore_get_scan_status with that scanId.
- 3After a terminal result, call certscore_get_scan_bundle for the canonical bounded result.
Try it
Start with MCP Light
Connect the public endpoint, review the three-tool workflow, and run a low-volume public website scan.