Negotiated 2025-11-25. The bar is 2025-06-18 or newer.
Pass
HTTPS
The endpoint URL is https.
Performance
Not measured
Fast (p50)
Median latency 1090 ms over 1 samples in 7 days. The bar is 1000 ms. Need at least 5 samples.
Not measured
Consistent (p95)
95th percentile 1090 ms over 1 samples in 7 days. The bar is 3000 ms. Need at least 20 samples.
Not measured
Reliable (uptime)
1 of 1 attempts returned a tool list in 30 days (100%). The bar is 99%. Need at least 30 samples.
Not measured
Stable tool list
Fewer than two successful probes in 30 days, so tool-list stability is not measured.
Access
Pass
Open access
tools/list succeeded with no credential, and the record declares none.
Not measured
Standard auth
Auth is not required, so the OAuth metadata check does not apply.
Not measured
Free tier cited
No publisher quote has been checked.
Tools
Pass
Tools described
Every tool description is at least 20 characters.
Pass
Valid input schemas
Every inputSchema is a JSON Schema object.
Pass
Parameters documented
6 of 6 parameters have a description (100%). The bar is 80%.
Pass
Safety hints
Every tool sets readOnlyHint or destructiveHint.
Publisher
Pass
Verified namespace
Listed in the Official MCP Registry.
Pass
Website matches publisher
The website host matches the reverse-domain namespace.
Fail
Source repo linked
No repository URL is on file.
Not measured
Repo owner matches
This namespace is not an io.github login, so the owner comparison does not apply.
Pass
Recently updated
Updated 2026-11-04T17:41:01.813332Z, within 180 days.
Not measured
Open-source licence
No GitHub repository to ask about a licence.
Start using RealMarket Site Check
Connect to this server
Choose your client, copy the configuration, then enable the server in your client’s MCP settings.
Run this command in your terminal, then restart Claude Code.
Claude Code
claude mcp add --transport http realmarket-site-check https://tools.realmarketlabs.com/mcp/site-check
Capabilities
Tools 3
check_ai_built_app
Reads the public pages and public JavaScript of a web app (typically built with Lovable, Bolt, v0, Replit or similar) and reports exposed API keys, public source maps, missing security headers, stale deploys, missing error monitoring and AI model calls made from the browser. Passive check: it never logs in, submits forms or probes private routes.
Discovered check_site_email_security
Checks whether a domain's email is likely to reach the inbox (SPF, DKIM and DMARC records, mail servers) and whether the website has basic security in place (HTTPS, security headers, WordPress exposure, Lovable/Supabase setup). Reads only public DNS records and the public home page. The report is written in Portuguese.
Discovered diagnose_shopify_store
Reads the public pages of a Shopify store and reports whether it offers social login and a wishlist, how many products show as sold out, and whether it runs storefronts for several countries. Reads only public pages.