Aso Audit MCP
What's your ASO score? SEO made you visible to search engines. ASO (Agent Signal Optimization) makes you discoverable, trustable, and payable by the AI agents that are becoming the web's next visitors. Its 5 documented tools cluster into read & search, scan, check. It runs locally over stdio via the published package.
People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.
VERIFIED ACTIVE
LAST COMMIT 2026-09-01 · ★ 2 · #75 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18
MIT · TypeScript servers · how we verify → /methodology
01 · Install Aso Audit MCP
Claude Code
claude mcp add forgemeshlabs-aso-audit-mcp -- npx -y @forgemeshlabs/aso-audit-mcp Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"forgemeshlabs-aso-audit-mcp": {
"command": "npx",
"args": [
"-y",
"@forgemeshlabs/aso-audit-mcp"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license MIT - declared in the repository
npm package @forgemeshlabs/aso-audit-mcp - published under the repo owner's npm scope (@forgemeshlabs)
registry namespace io.github.forgemeshlabs is GitHub-verified and matches the repo owner
03 · What Aso Audit MCP can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
An agent gets 5 documented tools across read & search, scan, check, including scan_site, get_fix_plan, check_signal, list_checks.
Capability map
Tools grouped from the project's README - what Aso Audit MCP lets an agent do.
read & search
3 tools - e.g. Prioritized remediation plan with ready-to-paste templates (robots.txt AI rules, llms.txt, agent.json, A2A agent card, MCP server card, x402 manifest, pricing.j; Catalog of every check with spec links…
get_fix_plan · list_checks · get_aso_framework
Scan
1 tool - e.g. Full ASO scan → Agent Readiness Report: ASO Score, level, pillar breakdown, all 34 checks with evidence + recommendations
scan_site
Check
1 tool - e.g. Run one specific check (e.g. a2a-agent-card, llms-txt, x402)
check_signal
Latest releases
v0.1.4 · 2026-06-17
ASO Audit MCP release aligned with Google agent-readiness guidance, browser-agent UX checks, and Glama registry metadata.
v0.1.3 · 2026-06-10
Glama-ready release for @forgemeshlabs/aso-audit-mcp. · This tagged source includes glama.json, npm installation metadata, usage examples, release verification, and local stdio authentication notes. · npx -y…
v0.1.2 · 2026-06-10
Release for @forgemeshlabs/aso-audit-mcp 0.1.2. · Glama registry metadata is available on master in glama.json. · Published npm package: @forgemeshlabs/aso-audit-mcp@0.1.2 · npx -y @forgemeshlabs/aso-audit-mcp · none…
04 · Who maintains Aso Audit MCP
aso-audit-mcp is maintained by forgemeshlabs. We track 19 MCP servers from forgemeshlabs - 17 actively maintained, 8 combined GitHub stars, oldest repo from May 2026.
05 · Facts
- repository
- github.com/forgemeshlabs/aso-audit-mcp
- category
- security - ranked #75 of 204 actively-maintained security servers as of 2026-09-18.
- registry
- io.github.forgemeshlabs/aso-audit-mcp (active, first published 2026-09-01 · 2 versions)
- packages
- npm:@forgemeshlabs/aso-audit-mcp
06 · Aso Audit MCP FAQ
Is Aso Audit MCP still maintained?
Yes - as of 2026-09-18, its last commit was 2026-09-01. We re-verify nightly.
What can Aso Audit MCP do?
An agent gets 5 documented tools across read & search, scan, check, including scan_site, get_fix_plan, check_signal, list_checks.
How do I install Aso Audit MCP?
Run `npx -y @forgemeshlabs/aso-audit-mcp`. You can also paste the ready-made client config above.
Does Aso Audit MCP run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Aso Audit MCP
Alternatives to Aso Audit MCP
Maintained security servers if Aso Audit MCP isn't the fit.
- Treg To OpenRouter for tools and data. Compare catalog providers and call them from one hosted MCP endpoint. ★ 1,627 · 2026-09-18
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,105 · 2026-09-16
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 652 · 2026-09-17
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 625 · 2026-09-18
- Decionis CommerceGate MCP Commerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes. ★ 533 · 2026-09-18
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 353 · 2026-09-15
Pairs well with
Servers that cover what Aso Audit MCP doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Clover Public · Zendesk MCP Server · Aguara MCP · Safety Warden · Modal Server
More TypeScript MCP servers · Formio MCP · Code Runner · Spec Driven Development · Uptier · Abap Adt (fr0ster) · see all