# CookieInspector Muse connector

From musedirectory.ai, the independent directory of Meta Muse connectors. Not affiliated with Meta.

## CookieInspector

Check what a website's cookie banner actually blocks and what trackers load before you consent.

- Record: https://musedirectory.ai/connector/cookieinspector
- Category: Research & Data
- Developer: CookieInspector (https://www.cookieinspector.com/developers/mcp)
- Muse status: Extra setup. Not in Muse's Connectors list yet. Muse can still use it: its page gives you a request to paste into Muse.
- Health: Working, 1111ms, checked 2026-10-29T15:16:30Z
- Endpoint: https://api.cookieinspector.com/mcp
- Auth: No account needed; Pricing: unknown
- Screening: Screened, no issues found (2026-10-29T15:16:30Z)
- Source: Found in the official MCP Registry (com.cookieinspector/cookieinspector) https://registry.modelcontextprotocol.io/v0/servers?search=com.cookieinspector%2Fcookieinspector

Scans websites to reveal cookies and trackers that load before consent, identifies the consent platform, and rates privacy risk. Provides technical findings on banner behavior and Google Consent Mode status. Quick pre-scans are free; full scans with browser automation require an account.

Example request: "Check if a shopping site is tracking me before I accept its cookie banner."

How to connect: Not in Muse's Connectors list yet, but Muse can still use it. Paste this into Muse: "Use CookieInspector to help me. It is a free service with an MCP server at https://api.cookieinspector.com/mcp. It does not need an API key. Ask me before you share anything with it." Muse asks before it shares anything with the app's site. Meta does not review apps used this way, so only use ones you trust. We tested this in the Muse app on September 24, 2026: Muse used an app's link directly this way and returned a live answer.

Tools:
- get_scan_summary: Summary of a completed scan on the connected account: risk score (0 best, 100 worst), verdict, banner and consent platform, cookie and tracker counts, the top issues and the report link. Technical findings, not legal advice.
- get_scan_status: Status of a scan on the connected account: queued, running, completed or failed, with the riskScore (0 best, 100 worst) once done. Technical findings, not legal advice.
- get_prescan_result: Return the result of a pre-scan started with prescan_site: riskScore (0 best, 100 worst, the same scale as the full report), risk level, how many cookies load before consent, up to five trackers by name, the consent platform and its confidence, Google Consent Mode status, three f
- start_scan: Start a full CookieInspector scan with a real browser (before and after the consent click, up to 5 pages) on the connected account. Optional region: main (US East), us-west, eu-de (Germany, for EU-targeted banners). Uses the plan's monthly scans. Returns a scanId to poll with get
- get_capabilities: Describe what CookieInspector checks on a website (cookies and trackers before and after the consent click, banner behaviour, consent platform, Google Consent Mode), which tools work without an account, which need a CookieInspector API key, and the quotas. Call this first when un
- list_scans: The most recent scans on the connected account, newest first (up to 20), each with its riskScore (0 best, 100 worst). Technical findings, not legal advice.
- get_scan_findings: The findings of a scan on the connected account, with severity, the affected resource and the recommendation, up to 25. Use explain_finding for what a code means. Technical findings, not legal advice.
- explain_finding: Explain a CookieInspector finding code (e.g. THIRD_PARTY_PRE_CONSENT) or what to check in a named consent platform (e.g. Cookiebot). No network call. Technical findings, not legal advice.
- prescan_site: Start a quick, anonymous pre-scan of a public website's home page: HTTP headers and HTML only, no real browser. Returns a preScanId to pass to get_prescan_result and a link to the report on cookieinspector.com. CookieInspector works alongside any consent platform; it checks what 

Screening checks:
- MCP handshake: pass (Answered in 1111ms)
- Domain against threat feeds (Cloudflare security DNS): pass (api.cookieinspector.com, www.cookieinspector.com not flagged)
- Published packages against the OSV malicious-package database: n/a (No npm or PyPI package published)
- Hidden instructions or invisible characters in tool text: pass (9 tools read, nothing found)
- Inputs asking for passwords, card numbers or seed phrases: pass (None found)
- Domain and redirects: pass (Domain registered 322 days ago)
- AI review of purpose and tool behavior: pass (No concerns)