AstraVerify inside your AI assistant
Last updated 2026-09-20
One server, every assistant
AstraVerify runs a remote MCP server at https://astraverify.com/mcp. Any assistant that supports the Model Context Protocol can call it: Claude (custom connectors), ChatGPT (connectors and the Apps SDK), Gemini (CLI and Enterprise), Cursor, Windsurf and others. Nothing to install on your side; no key is needed for cached results and a modest number of fresh scans.
Tools: check_email_security, check_discoverability, get_report, fetch_as_crawler and verify_fix. Scores are computed by the same rules as this website, so what your assistant says matches what the report page shows.
Claude
- claude.ai: Settings → Connectors → Add custom connector → URL https://astraverify.com/mcp → Add. No authentication needed; paste an AstraVerify API key as a bearer token later if you have one.
- Claude Code: claude mcp add --transport http astraverify https://astraverify.com/mcp
- Then ask: "Is example.com set up right for email and AI discovery?"
ChatGPT
- Connectors (Team/Enterprise/Pro with developer mode): Settings → Connectors → Create → MCP server URL https://astraverify.com/mcp, authentication none.
- Custom GPT (Actions): Configure → Add action → Import from URL https://astraverify.com/openapi.json.
Gemini
- Gemini CLI: add {"mcpServers":{"astraverify":{"httpUrl":"https://astraverify.com/mcp"}}} to ~/.gemini/settings.json.
- Gemini Enterprise / Agentspace: register the MCP server URL as a tool.
Plain HTTP
The same operations are available as JSON over HTTPS, described by https://astraverify.com/openapi.json:
curl "https://astraverify.com/api/v1/report?domain=example.com"
curl "https://astraverify.com/api/v1/fetch-as?domain=example.com&agent=gptbot"Limits and keys
Results are cached for 15 minutes and served to everyone; a fresh scan costs real requests to the domain, so anonymous clients get a modest hourly allowance and each domain is scanned fresh at most 30 times an hour across all users. An AstraVerify API key (created on your page at /my, which you receive after any purchase) lifts the anonymous allowance. Send it as Authorization: Bearer av_….
The server is stateless and read-only except verify_fix, which re-fetches public pages. It never receives credentials and never writes to your domain.