CertScore.ai MCP Light is now available
CertScore.ai website privacy scanning is now available directly to AI agents — with no account, API key, or OAuth required.
MCP Light is a deliberately simple public MCP interface for low-volume website privacy scanning. It makes CertScore.ai’s evidence-backed public website observations available inside agent workflows without requiring credential setup.
The launch keeps the workflow focused: start or reuse a scan, check its status when work is still active, then retrieve a bounded result bundle with findings, evidence references, limitations, and the full CertScore report URL where available.
What’s new
- No account, API key, or OAuth is required.
- A public Streamable HTTP MCP endpoint works with MCP-capable agents and clients.
- Three focused tools cover scan creation, active-status checks, and result retrieval.
- Eligible recent scans can be reused instead of starting unnecessary new work.
- Results link back to the full CertScore report when a report is available.
Why it matters
Agents can bring public website privacy observations into a review workflow without asking a user to create credentials first. That makes MCP Light useful for evaluation, discovery, and occasional evidence gathering.
The output remains grounded in CertScore.ai’s existing product posture: automated observations for human and agentic review, not legal advice, certification, or a compliance determination.
How it works
Depending on the retained evidence, observations can include cookies and browser storage, trackers and vendors, consent or CMP behavior, privacy-policy surfaces, and related public website signals. Coverage limitations travel with the result and should be reviewed with the evidence.
- 1Call certscore_scan_site with a public HTTP or HTTPS URL.
- 2If the scan is still active and a scanId was returned, call certscore_get_scan_status with that scanId.
- 3After a terminal result, call certscore_get_scan_bundle for the canonical bounded result.
Try it
Start with MCP Light
Connect the public endpoint, review the three-tool workflow, and run a low-volume public website scan.