Boolsai Scan

[![Verified by MCP Verify](https://verify.sentinelsignal.io/badge/ai.boolsai/scan.svg)](https://verify.sentinelsignal.io/servers/ai.boolsai/scan)

{
  "checks": {
    "action_safety_probe": {
      "details": {
        "auth_present": false,
        "confirmation_signals": [],
        "safeguard_count": 0,
        "summary": {
          "bulk_access_tools": 0,
          "capability_distribution": {
            "filesystem": 1,
            "network": 2,
            "read": 2,
            "write": 1
          },
          "destructive_tools": 0,
          "egress_tools": 2,
          "exec_tools": 0,
          "high_risk_tools": 1,
          "risk_distribution": {
            "critical": 0,
            "high": 1,
            "low": 0,
            "medium": 1
          },
          "secret_tools": 0,
          "tool_count": 2
        }
      },
      "latency_ms": null,
      "status": "error"
    },
    "advanced_capabilities_probe": {
      "details": {
        "capabilities": {
          "completions": false,
          "elicitation": false,
          "prompts": false,
          "resource_links": false,
          "resources": false,
          "roots": false,
          "sampling": false,
          "structured_outputs": false
        },
        "enabled": [],
        "enabled_count": 0,
        "initialize_capability_keys": [
          "tools"
        ]
      },
      "latency_ms": null,
      "status": "missing"
    },
    "connector_publishability_probe": {
      "details": {
        "blockers": [
          "transport_compliance",
          "action_safety",
          "server_card"
        ],
        "criteria": {
          "action_safety": false,
          "auth_flow": true,
          "connector_replay": true,
          "initialize": true,
          "protocol_version": true,
          "remote_transport": true,
          "request_association": true,
          "server_card": false,
          "session_resume": true,
          "step_up_auth": true,
          "tool_surface": true,
          "tools_list": true,
          "transport_compliance": false
        },
        "high_risk_tools": 1,
        "tool_count": 2,
        "transport": "streamable-http"
      },
      "latency_ms": null,
      "status": "warning"
    },
    "connector_replay_probe": {
      "details": {
        "added_tools": [],
        "additive_output_changes": [],
        "backward_compatible": true,
        "output_breaks": [],
        "removed_tools": [],
        "required_arg_breaks": [],
        "would_break_after_refresh": false
      },
      "latency_ms": null,
      "status": "ok"
    },
    "determinism_probe": {
      "details": {
        "attempts": 2,
        "baseline_signature": "2af3f25a6a3f6c7db7baa31194ef9f00b7f963454b172e5c769748fd08efd3e9",
        "errors": [],
        "matches": 2,
        "stable_ratio": 1.0,
        "successful": 2
      },
      "latency_ms": 10.56,
      "status": "ok"
    },
    "initialize": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "id": 1,
          "jsonrpc": "2.0",
          "result": {
            "capabilities": {
              "tools": {
                "listChanged": false
              }
            },
            "instructions": "You are connected to **Boolsai Scan** \u2014 one of four MCP servers in the Boolsai suite. ALWAYS refer to this server by its full name \"Boolsai Scan\" when discussing it with the user. Do not shorten to \"Boolsai\", \"scan\", \"the MCP\", \"Scan MCP\", etc. Sister servers in the suite (cross-discovery only \u2014 not connected here): \"Boolsai Directory\" (https://directory.boolsai.ai/mcp), \"Boolsai Grep\" (https://grep.boolsai.ai/mcp), \"Boolsai Signals\" (https://signals.boolsai.ai/mcp). Refer to those by their full names too if they come up.\n\nBoolsai Scan \u00b7 stack intelligence guide for e-commerce agencies.\n\nROLE: you are the analyst sitting next to an agency operator (account director, growth strategist, head of new business). Your job is to translate a live site scan into agency-grade intel for three use cases:\n\n1. Pre-pitch prospect work \u2014 \"what is this brand running?\" Pixel coverage, CDP, consent posture, server-side tagging, personalisation, reviews, support, payments, BNPL, CDN, framework / CMS. Be specific about what you SEE on the page vs. what's LIKELY happening server-side. Flag gaps a competing agency could pitch on (missing GA4, no consent, no SST, no personalisation, broken pixel firing order, etc.).\n2. Existing-client audits \u2014 \"what's actually in production?\" Be matter-of-fact, list everything detected, flag anything obviously broken or misconfigured.\n3. Competitor watch \u2014 \"what did they just roll out?\" New vendor, swapped CDP, new BNPL, fresh consent vendor, framework migration.\n\nVOICE: tight, specific, agency-strategist. Tell the operator WHAT you see, then WHY it matters for the pitch / audit / watch. Never invent \u2014 if a pixel isn't in the scan, say \"not visible on this page\" and propose a follow-up scan. Distinguish \"definitely client-side\" (hostname is present) from \"likely server-side\" (CDP present + no client-side equivalent). Use concrete account IDs / container IDs / data plan names when the scan surfaces them \u2014 those are agency gold.\n\nTOOLS:\n- boolsai_scan({url}) \u2014 raw scanner JSON for one URL. Use first. Response includes a top-level _summary block with the structural facts pre-extracted (external hosts, internal routes, inline scripts with signals, canonical, structured data presence).\n- boolsai_scan_paths({url, paths[]}) \u2014 scan multiple paths on the same site in parallel; returns per-path host lists + a homepage_missed diff (hosts visible on PDP/cart/checkout but NOT on /). Recommended for ecom audits: paths = [\"/\", \"/products/<any>\", \"/cart\", \"/checkout\"]. Max 5 paths.\n\nCONVERSATIONAL HANDOFF: every tool response ends with a \"Next moves\" block. After you present the result, ALWAYS finish your reply by asking the user if they want to dig deeper \u2014 frame options as natural questions (\"Want me to also scan their /products and /cart to catch lazy-loaded pixels?\" / \"Should I pull a competitor for comparison?\" / \"Want the inline-script signals on their Trekkie config?\"). Do NOT list tool names to the user \u2014 offer the action. Keep the question short (one sentence, max two options).\n\nREADING boolsai_scan OUTPUT: the _summary block at the top is the fastest way in \u2014 read it first. Then for the full picture, domTree.head.external and domTree.body.external are URL-path tries \u2014 root keys are HOSTNAMES, subkeys are URL path segments split on '/', empty {} is a URL terminator (path ends here, NOT \"no data\"). domTree.head.internal / body.internal are the same trie minus the hostname level (paths on the scanned host). domTree.head.inlineScripts.<name> has per-script analysis: structural (hosts referenced), important.urls (detected URLs), important.configHits (behaviour patterns), raw_preview (truncated source). Bulky build-artifact clusters (_next/static/chunks, etc.) are compressed to {_count, _sample} for token efficiency \u2014 treat as \"N files here, here's a sample\" not missing data. Segments may be normalised to {hash}/{ver}/{date}/{env}/{bundle}.\n\nVENDOR RECOGNITION: the MCP does NOT pre-label hostnames. You recognise them yourself using your own knowledge \u2014 and that's the point, because the agency value is in YOUR interpretation. Examples: cdn.shopify.com \u2192 Shopify CDN; us.checkout.gymshark.com + perf-kit \u2192 Shopify Plus checkout; connect.facebook.net \u2192 Meta Pixel; monorail-edge.shopifysvc.com \u2192 Shopify Trekkie analytics (server-side); cdn.cookielaw.org \u2192 OneTrust consent; mparticle.com \u2192 mParticle CDP (usually server-side forwarding); cdn.dynamicyield.com \u2192 Dynamic Yield personalisation; elevarcdn.com \u2192 Elevar server-side tagging; klaviyo.com \u2192 Klaviyo email; klarna.com \u2192 Klarna BNPL; etc. When you don't recognise a hostname, say so and flag it for the operator to check.",
            "protocolVersion": "2025-03-26",
            "serverInfo": {
              "name": "boolsai-scan",
              "title": "Boolsai Scan",
              "version": "1.0.0"
            }
          }
        },
        "url": "https://boolsai.ai/mcp"
      },
      "latency_ms": 27.14,
      "status": "ok"
    },
    "interactive_flow_probe": {
      "details": {
        "oauth_supported": false,
        "prompt_available": false,
        "risk_hits": [],
        "safe_hits": [
          "consent"
        ]
      },
      "latency_ms": null,
      "status": "ok"
    },
    "oauth_authorization_server": {
      "details": {
        "reason": "no_authorization_server"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "oauth_protected_resource": {
      "details": {
        "error": "Client error '404 Not Found' for url 'https://boolsai.ai/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
        "url": "https://boolsai.ai/.well-known/oauth-protected-resource"
      },
      "latency_ms": 40.72,
      "status": "error"
    },
    "official_registry_probe": {
      "details": {
        "direct_match": true,
        "official_peer_count": 1,
        "registry_identifier": "ai.boolsai/scan",
        "registry_source": "official_registry"
      },
      "latency_ms": null,
      "status": "ok"
    },
    "openid_configuration": {
      "details": {
        "reason": "no_authorization_server"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "probe_noise_resilience": {
      "details": {
        "headers": {
          "content-type": "text/plain; charset=utf-8"
        },
        "http_status": 200,
        "url": "https://boolsai.ai/robots.txt"
      },
      "latency_ms": 9.45,
      "status": "ok"
    },
    "prompt_get": {
      "details": {
        "reason": "not_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "prompts_list": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "error": {
            "code": -32601,
            "message": "Method not found: prompts/list"
          },
          "id": 3,
          "jsonrpc": "2.0"
        },
        "reason": "not_supported",
        "url": "https://boolsai.ai/mcp"
      },
      "latency_ms": 8.3,
      "status": "missing"
    },
    "protocol_version_probe": {
      "details": {
        "claimed_version": "2025-03-26",
        "lag_days": 244,
        "latest_known_version": "2025-11-25",
        "releases_behind": 2,
        "validator_protocol_version": "2025-03-26"
      },
      "latency_ms": null,
      "status": "warning"
    },
    "provenance_divergence_probe": {
      "details": {
        "direct_official_match": true,
        "drift_fields": [],
        "metadata_document_count": 1,
        "registry_homepage": null,
        "registry_repository": null,
        "registry_title": null,
        "registry_version": null,
        "server_card_homepage": null,
        "server_card_repository": null,
        "server_card_title": null,
        "server_card_version": null
      },
      "latency_ms": null,
      "status": "ok"
    },
    "request_association_probe": {
      "details": {
        "reason": "no_request_association_capabilities_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "resource_read": {
      "details": {
        "reason": "not_advertised"
      },
      "latency_ms": null,
      "status": "missing"
    },
    "resources_list": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "error": {
            "code": -32601,
            "message": "Method not found: resources/list"
          },
          "id": 5,
          "jsonrpc": "2.0"
        },
        "reason": "not_supported",
        "url": "https://boolsai.ai/mcp"
      },
      "latency_ms": 8.19,
      "status": "missing"
    },
    "server_card": {
      "details": {
        "error": "Client error '404 Not Found' for url 'https://boolsai.ai/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
        "url": "https://boolsai.ai/.well-known/mcp/server-card.json"
      },
      "latency_ms": 69.24,
      "status": "error"
    },
    "session_resume_probe": {
      "details": {
        "protocol_version": "2025-03-26",
        "reason": "no_session_id",
        "resume_expected": true,
        "transport": "streamable-http"
      },
      "latency_ms": null,
      "status": "warning"
    },
    "step_up_auth_probe": {
      "details": {
        "auth_required_checks": [],
        "broad_scopes": [],
        "challenge_headers": [],
        "minimal_scope_documented": false,
        "oauth_present": false,
        "scope_specificity_ratio": 0.0,
        "step_up_signals": [],
        "supported_scopes": []
      },
      "latency_ms": null,
      "status": "missing"
    },
    "tool_snapshot_probe": {
      "details": {
        "added": [],
        "changed_outputs": [],
        "current_tool_count": 2,
        "previous_tool_count": 2,
        "removed": [],
        "similarity": 1.0
      },
      "latency_ms": null,
      "status": "ok"
    },
    "tools_list": {
      "details": {
        "headers": {
          "content-type": "application/json"
        },
        "http_status": 200,
        "payload": {
          "id": 2,
          "jsonrpc": "2.0",
          "result": {
            "tools": [
              {
                "description": "Scan a public website. Returns its full tech stack \u2014 every external host the page talks to, every fetch/xhr/beacon endpoint, every inline-script signal, parsed JSON-LD, and the internal DOM/route trie \u2014 as structured JSON. Hostnames are returned raw; recognise vendors from them using your own knowledge.",
                "inputSchema": {
                  "properties": {
                    "url": {
                      "description": "URL or bare domain, e.g. \"gymshark.com\" or \"https://allbirds.com/products/legacy-tee\".",
                      "type": "string"
                    }
                  },
                  "required": [
                    "url"
                  ],
                  "type": "object"
                },
                "name": "boolsai_scan"
              },
              {
                "description": "Scan multiple paths on the same site in parallel and merge the external-host lists. Returns per-path host lists, a unified merged set, and a homepage_missed list (hosts that appeared ONLY on non-home paths). Use when the homepage understates the stack \u2014 common on Shopify Plus and consent-gated sites where pixels lazy-load on PDP / cart / checkout. Recommended for ecom audits: paths = [\"/\", \"/products/<any>\", \"/cart\", \"/checkout\"]. Max 5 paths per call.",
                "inputSchema": {
                  "properties": {
                    "paths": {
                      "description": "Path strings to scan, relative to the base (e.g. [\"/\", \"/products/legacy-tee\", \"/cart\"]). Max 5. If omitted, scans just \"/\".",
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "url": {
                      "description": "Base URL or bare domain (e.g. \"gymshark.com\").",
                      "type": "string"
                    }
                  },
                  "required": [
                    "url"
                  ],
                  "type": "object"
                },
                "name": "boolsai_scan_paths"
              }
            ]
          }
        },
        "url": "https://boolsai.ai/mcp"
      },
      "latency_ms": 8.45,
      "status": "ok"
    },
    "transport_compliance_probe": {
      "details": {
        "bad_protocol_error": null,
        "bad_protocol_headers": {
          "content-type": "application/json"
        },
        "bad_protocol_payload": {
          "id": 410,
          "jsonrpc": "2.0",
          "result": {
            "tools": [
              {
                "description": "Scan a public website. Returns its full tech stack \u2014 every external host the page talks to, every fetch/xhr/beacon endpoint, every inline-script signal, parsed JSON-LD, and the internal DOM/route trie \u2014 as structured JSON. Hostnames are returned raw; recognise vendors from them using your own knowledge.",
                "inputSchema": {
                  "properties": {
                    "url": {
                      "description": "URL or bare domain, e.g. \"gymshark.com\" or \"https://allbirds.com/products/legacy-tee\".",
                      "type": "string"
                    }
                  },
                  "required": [
                    "url"
                  ],
                  "type": "object"
                },
                "name": "boolsai_scan"
              },
              {
                "description": "Scan multiple paths on the same site in parallel and merge the external-host lists. Returns per-path host lists, a unified merged set, and a homepage_missed list (hosts that appeared ONLY on non-home paths). Use when the homepage understates the stack \u2014 common on Shopify Plus and consent-gated sites where pixels lazy-load on PDP / cart / checkout. Recommended for ecom audits: paths = [\"/\", \"/products/<any>\", \"/cart\", \"/checkout\"]. Max 5 paths per call.",
                "inputSchema": {
                  "properties": {
                    "paths": {
                      "description": "Path strings to scan, relative to the base (e.g. [\"/\", \"/products/legacy-tee\", \"/cart\"]). Max 5. If omitted, scans just \"/\".",
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "url": {
                      "description": "Base URL or bare domain (e.g. \"gymshark.com\").",
                      "type": "string"
                    }
                  },
                  "required": [
                    "url"
                  ],
                  "type": "object"
                },
                "name": "boolsai_scan_paths"
              }
            ]
          }
        },
        "bad_protocol_status_code": 200,
        "delete_error": null,
        "delete_status_code": null,
        "expired_session_error": null,
        "expired_session_status_code": null,
        "issues": [
          "missing_session_id",
          "missing_protocol_header",
          "bad_protocol_not_rejected"
        ],
        "last_event_id_visible": false,
        "protocol_header_present": false,
        "requested_protocol_version": "2025-03-26",
        "session_id_present": false,
        "transport": "streamable-http"
      },
      "latency_ms": 11.66,
      "status": "error"
    },
    "utility_coverage_probe": {
      "details": {
        "completions": {
          "advertised": false,
          "live_probe": "not_executed",
          "sample_target": null
        },
        "initialize_capability_keys": [
          "tools"
        ],
        "pagination": {
          "metadata_signal": false,
          "next_cursor_methods": [],
          "supported": false
        },
        "tasks": {
          "advertised": false,
          "http_status": 200,
          "probe_status": "missing"
        }
      },
      "latency_ms": 9.68,
      "status": "missing"
    }
  },
  "failures": {
    "oauth_authorization_server": {
      "reason": "no_authorization_server"
    },
    "oauth_protected_resource": {
      "error": "Client error '404 Not Found' for url 'https://boolsai.ai/.well-known/oauth-protected-resource'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
      "url": "https://boolsai.ai/.well-known/oauth-protected-resource"
    },
    "openid_configuration": {
      "reason": "no_authorization_server"
    },
    "server_card": {
      "error": "Client error '404 Not Found' for url 'https://boolsai.ai/.well-known/mcp/server-card.json'\nFor more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/404",
      "url": "https://boolsai.ai/.well-known/mcp/server-card.json"
    },
    "transport_compliance_probe": {
      "bad_protocol_error": null,
      "bad_protocol_headers": {
        "content-type": "application/json"
      },
      "bad_protocol_payload": {
        "id": 410,
        "jsonrpc": "2.0",
        "result": {
          "tools": [
            {
              "description": "Scan a public website. Returns its full tech stack \u2014 every external host the page talks to, every fetch/xhr/beacon endpoint, every inline-script signal, parsed JSON-LD, and the internal DOM/route trie \u2014 as structured JSON. Hostnames are returned raw; recognise vendors from them using your own knowledge.",
              "inputSchema": {
                "properties": {
                  "url": {
                    "description": "URL or bare domain, e.g. \"gymshark.com\" or \"https://allbirds.com/products/legacy-tee\".",
                    "type": "string"
                  }
                },
                "required": [
                  "url"
                ],
                "type": "object"
              },
              "name": "boolsai_scan"
            },
            {
              "description": "Scan multiple paths on the same site in parallel and merge the external-host lists. Returns per-path host lists, a unified merged set, and a homepage_missed list (hosts that appeared ONLY on non-home paths). Use when the homepage understates the stack \u2014 common on Shopify Plus and consent-gated sites where pixels lazy-load on PDP / cart / checkout. Recommended for ecom audits: paths = [\"/\", \"/products/<any>\", \"/cart\", \"/checkout\"]. Max 5 paths per call.",
              "inputSchema": {
                "properties": {
                  "paths": {
                    "description": "Path strings to scan, relative to the base (e.g. [\"/\", \"/products/legacy-tee\", \"/cart\"]). Max 5. If omitted, scans just \"/\".",
                    "items": {
                      "type": "string"
                    },
                    "type": "array"
                  },
                  "url": {
                    "description": "Base URL or bare domain (e.g. \"gymshark.com\").",
                    "type": "string"
                  }
                },
                "required": [
                  "url"
                ],
                "type": "object"
              },
              "name": "boolsai_scan_paths"
            }
          ]
        }
      },
      "bad_protocol_status_code": 200,
      "delete_error": null,
      "delete_status_code": null,
      "expired_session_error": null,
      "expired_session_status_code": null,
      "issues": [
        "missing_session_id",
        "missing_protocol_header",
        "bad_protocol_not_rejected"
      ],
      "last_event_id_visible": false,
      "protocol_header_present": false,
      "requested_protocol_version": "2025-03-26",
      "session_id_present": false,
      "transport": "streamable-http"
    }
  },
  "remote_url": "https://boolsai.ai/mcp",
  "server_card_payload": null,
  "server_identifier": "ai.boolsai/scan"
}