# HolicAudit Muse connector

From musedirectory.ai, the independent directory of Meta Muse connectors. Not affiliated with Meta.

## HolicAudit

Check any web page for SEO, AI crawler visibility and security headers, with a score and plain fixes.

- Record: https://musedirectory.ai/connector/holicaudit
- Category: Marketing & Ads
- Developer: huutran (https://audit.huutran.dev/mcp-server)
- Muse status: Extra setup. Not in Muse's Connectors list yet. Muse can still use it: its page gives you a request to paste into Muse.
- Health: Working, 96ms, checked 2026-11-10T08:21:10Z
- Endpoint: https://audit.huutran.dev/mcp
- Auth: No account needed; Pricing: unknown
- Screening: Screened, no issues found (2026-11-10T08:21:10Z)
- Source: Found in the official MCP Registry (dev.huutran.audit/website-checks) https://registry.modelcontextprotocol.io/v0/servers?search=dev.huutran.audit%2Fwebsite-checks

Connects to a public URL and runs three passive checks: on-page SEO (title, meta, headings, sitemap, speed), AI visibility (whether GPTBot, ClaudeBot, PerplexityBot and others can read and cite the page, plus llms.txt and JSON-LD), and security headers and DNS records graded A to F. Each issue comes with a plain-English fix.

Example request: "Check my bakery's homepage for SEO problems and whether AI search tools can read it."

How to connect: Not in Muse's Connectors list yet, but Muse can still use it. Paste this into Muse: "Use HolicAudit to help me. It is a free service with an MCP server at https://audit.huutran.dev/mcp. It does not need an API key. Ask me before you share anything with it." Muse asks before it shares anything with the app's site. Meta does not review apps used this way, so only use ones you trust. We tested this in the Muse app on September 24, 2026: Muse used an app's link directly this way and returned a live answer.

Tools:
- seo_check: On-page SEO check of one public URL: title, meta description, H1, canonical, Open Graph, lang, viewport, noindex, word count and empty JavaScript app shells, robots.txt, XML sitemap, HTTPS, server response time and HTML size. Returns a 0-100 score and a plain-English fix for each
- ai_visibility_check: Checks whether AI crawlers and AI search tools (ChatGPT, Claude, Perplexity, Google AI Overviews, Copilot) can read and cite a public URL: robots.txt rules for GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, PerplexityBot, Google-Extended, CCBot, Applebot-Extend
- security_headers_check: Passive security check of one public URL: one ordinary page load plus public DNS. Grades HTTPS, HSTS, Content-Security-Policy, clickjacking protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, version-leaking headers, cookie flags, SPF, DMARC, DKIM, CAA and DN

Screening checks:
- MCP handshake: pass (Answered in 96ms)
- Domain against threat feeds (Cloudflare security DNS): pass (audit.huutran.dev not flagged)
- Published packages against the OSV malicious-package database: n/a (No npm or PyPI package published)
- Hidden instructions or invisible characters in tool text: pass (3 tools read, nothing found)
- Inputs asking for passwords, card numbers or seed phrases: pass (None found)
- Domain and redirects: pass (No redirects off the domain)
- AI review of purpose and tool behavior: pass (No concerns)