MCP servercom.validoria/validoria-mcp

Acknowledge an open incident to signal that someone is looking at it. Changes status from OPEN to ACKNOWLEDGED.

Get currently running and queued tests across all targets. Useful for checking what tests are in progress right now.

Add an SEO keyword to track for a target. Max 50 keywords per target.

Fingerprint a URL and get test recommendations before creating a target. Detects platform (Shopify, WordPress, etc.), CDN, server stack, frontend framework, analytics, and B2B/ecom

Cancel a running load test.

Create an automation rule that reacts to events. Triggers: TEST_FAILED, TEST_RECOVERED, INCIDENT_CREATED, INCIDENT_RESOLVED, TARGET_DOWN, TARGET_RECOVERED. Actions: escalate (chang

Create a custom browser test flow for a target. Steps are executed sequentially in a Playwright browser. Supports actions: navigate, click, type, fill, select, assert, wait, screen

Schedule a maintenance window for a target. During maintenance, alerts and notifications are suppressed. Supports one-time, daily, and weekly recurring windows.

Create a rule to auto-mute findings matching a pattern. Existing open findings matching the rule are muted immediately. Supports muting by fingerprint pattern, test definition, or

Create a notification alert rule. Defines which events at which severity levels trigger notifications on which channels. Supports quiet hours and per-target scoping.

Create a reusable step sequence that can be shared across multiple Journeys. Fragment names must be unique per team.

Create a new scheduled email report. Reports include run stats, open findings, composite scores, and per-target status.

Add a new website, API, or webshop target for monitoring with full onboarding. Automatically enables compatible tests, triggers an initial scan, and captures a page screenshot. Req

Get daily time-series data for runs, findings, and average duration. Useful for identifying trends over time. Returns up to 90 days of data.

Permanently delete an automation rule.

Permanently delete a journey and all its steps.

Remove a scheduled maintenance window.

Permanently delete a notification rule.

Permanently delete a page fragment.

Permanently delete a scheduled report.

Permanently delete a secret from a target's vault.

Permanently delete a target and all its associated data (runs, findings, incidents, artifacts). This cannot be undone.

Disable all test definitions globally. Optionally filter by category to only disable tests in that category. Requires admin scope.

Enable all test definitions globally. Optionally filter by category to only enable tests in that category. Requires admin scope.

Get full details of a specific automation rule.

Get full details of a specific finding, including evidence, AI analysis, and recommended fix.

Get full details of a specific incident including linked findings, AI analysis, and deployment correlation.

Get full details of a specific journey including all steps.

Get details and results of a load test run.

Get full details of a specific test run including metrics, score, summary, errors, and associated findings.

Get the latest crawl snapshot for a target. Returns page inventory stats, SEO issues, broken pages/assets, response times, and a diff against the previous crawl. Optionally include

Get detailed information about a specific target including status, uptime, fingerprint, and composite scores.

Get composite scores (Security, SEO, Performance, Accessibility, AI-search readiness) for a target. Each score is 0-100 with a status rating.

Get the team's configuration including AI enrichment, uptime monitoring, severity escalation, run policies, notification coalescing, SEO, and Kloner Tasks integration settings.

Poll results for a guest_start_scan. Pass the scanId and guestSessionId from the start response. No API key required.

Run a free 6-test HTTP scan against a public URL without an API key. Rate-limited (5/IP/hour, 3/session/day). Returns scanId — poll with guest_get_scan. For continuous monitoring,

Bulk import up to 100 websites for monitoring. Each URL gets a target created with auto-enabled tests, initial scan, and screenshot capture. Partial success — failed URLs are repor

List all automation rules for the team. Rules automatically react to events (test failures, incidents, downtime) with configurable actions (escalate severity, suppress, rerun, webh

List findings (discovered issues) across your targets. Filter by status, severity, or target. Returns title, severity, status, test name, and AI enrichment if available.

List incidents (grouped operational issues) across your targets. Filter by status. Returns title, severity, status, findings count, and deployment correlation.

List custom browser test flows (journeys) for a target or all team targets. Journeys are multi-step Playwright tests that verify user flows like checkout, login, and search.

List all SEO keywords tracked for a target, including latest Google rank position. Max 50 per target.

List recent load test runs for a target.

List maintenance windows for a target. Shows scheduled and recurring maintenance periods that suppress alerts.

List all notification channels (Email, Slack, Webhook, SMS, Web Push) configured for the team. Sensitive config values are redacted.

List all notification alert rules for the team. Rules map event types + severity levels to notification channels.

List all reusable page fragments for the team. Fragments are shared step sequences (e.g. "Login", "Dismiss Cookies") that can be inserted into multiple Journeys via the use_fragmen

List recent test runs. Filter by target, status, or test slug. Returns run status, score, summary, duration, and finding count.

List all scheduled reports for the team. Reports are automatically generated and emailed on a daily or weekly basis.

List secrets stored in a target's vault. Values are masked — only key names and labels are shown. Secrets are used by test plugins (e.g. LOGIN_EMAIL, LOGIN_PASSWORD for B2B shops,

List all monitoring targets for your team. Returns name, URL, type, status, and uptime info for each target.

List all available test definitions (plugins). Shows slug, name, category, runner type, weight class, schedule, and enablement status. Useful for knowing which tests can be trigger

Mute an open finding to suppress it from dashboards and alerts. Status changes from OPEN to MUTED.

Force recompute all composite scores (Security, SEO, Performance, Accessibility) for a target. Useful after manual changes or when scores seem stale.

Record a deployment event for a target. Deployments are auto-correlated with incidents created within 20 minutes. Useful for tracking releases and root-cause analysis.

Remove an SEO keyword from a target.

Resolve an incident to mark it as handled. Changes status to RESOLVED and sets the closed timestamp.

Update the value of an existing secret.

Start a load test against a target. Max 100 concurrent connections, max 5 min duration, 1 test at a time per target, 60s cooldown between tests. Modes: HTTP_FLOOD (autocannon), BRO

Store an encrypted secret in a target's vault. Common keys: LOGIN_EMAIL, LOGIN_PASSWORD (B2B shop auth), ga4_service_account (GA4 monitoring). Values are AES-256-GCM encrypted at r

Get a comprehensive system health report: BullMQ queue depths, active/stuck runs, user sessions, notification delivery stats, and recent error counts. Requires admin scope.

Get statistics for a specific target: runs, pass rate, findings, duration. Supports lifetime, monthly, or weekly periods.

Get team-wide overview statistics: total runs, pass rate, open findings, open incidents, average duration. Supports lifetime, monthly, or weekly periods.

Run all enabled tests against a target as a scan workflow. All tests in the target's test profile are queued. Returns the workflow ID and list of queued runs.

Execute a journey (custom browser test flow) against its target. The journey runs asynchronously — use get_run to check progress.

Run a specific test against a target. Specify either the test definition ID or slug. The test is queued and executed asynchronously — use get_run to check status.

Update an existing automation rule. Any field not provided will remain unchanged.

Update a journey's name, settings, or steps. When steps are provided, all existing steps are replaced.

Update a notification rule. Only provided fields are changed.

Update a page fragment. When steps are provided, all existing steps are replaced.

Update an existing scheduled report. Any field not provided stays unchanged.

Update a target's properties (name, URL, type, environment, business weight, tags, uptime toggle).

Update team configuration. All fields are optional — only provided fields are changed. Covers: AI enrichment (model, temperature, auto-enrich, spending cap), uptime (timeout, thres

Enable or disable a test definition globally, or update its schedule/timeout. Requires admin scope.