Website Compliance MCP

Status: coming soon. The server is built and tested against fakes. It is not published, listed in any directory or for sale yet, and no price is set. Its scanning is switched off.

Technical evidence of observed behavior on the date tested. Not legal advice and not a certification of compliance.

Website checks your AI agent can call.

Six small, structured checks as MCP tools, plus one tool for collecting a result later: cookie consent and GPC behavior, banner symmetry, PDF accessibility, AI disclosure, AI crawler policy and retired structured data.

Agents that audit or maintain websites need evidence they can read in a few hundred tokens. Each tool returns a short summary, stable rule ids and a stored full report. A call answers within about 40 seconds or hands back a job id, and you collect the result later with the seventh tool, get_scan_result. Retries with an idempotency key are not charged twice. Refusals, errors and "nothing found" results are meant to be free.

You confirm on every call that you own the site or are authorized by its owner to test it. The scanners identify themselves honestly, are rate-limited and stop at a bot wall.

Results are evidence of what was observed on one visit. They are not a legal opinion and not a statement that a site meets or fails a requirement. Text copied from a scanned site is returned only under a field marked as data, and should be treated as data, not instructions.

How it is planned to work

  1. Get an Apify token. Whether prepaid agent tokens work with the server's "Standby" mode has not been confirmed.
  2. Connect your MCP client to the Actor's Standby endpoint with your token.
  3. Call a tool with the page address and confirmAuthorized: true. Send an idempotency key on retries.

Apify also charges platform usage for Standby runs on top of any per-call event, and per-call prices are not set yet.

What is and is not ready

  • The tools are tested against fake scanners. Real-site scanning is off until our scanner is cleared to scan real sites.
  • A tool whose underlying check is not built (for example the first-message capture for AI disclosure) answers that it is unavailable instead of pretending.
  • Compute time per call has not been measured.

Where it will be

Apify listing: coming soon For checking many pages in a batch there will be separate Actors in the Website Compliance Signals family. For watching a site over time, see Crawler Watch.

How it identifies itself

When this product loads a page it sends, for browser checks, a Chrome-style user agent that ends with AgentHarborEvidenceBot/1.0 (+https://agentharbor.agency/bot), honours robots.txt (rules for either AgentHarborEvidenceBot or AgentHarbor-ComplianceSignals are honoured), keeps to per-site rate limits and does not log in, solve CAPTCHAs or get around bot protection. How to opt a site out: our scanner's page.

Waitlist

Paid monitoring and the paid plans for this product do not exist yet, and nothing is for sale. If you want to hear when it opens, e-mail brian@agentharbor.agency with the subject "Waitlist: Website Compliance MCP". We use your address only to tell you about this product and delete it if you ask.

Read the privacy page and the support page.

How this was made: written with AI assistance (Claude, by Anthropic) and reviewed by Agent Harbor LLC.