Skip to content
MCPSTAMP
MCP server report

ScrapingBot MCP server

io.scrapingbot/scrapingbot

We checked this server on 2 November 2026 with McpStamp Check engine 1.2.0. It scored 70 of 100 (grade C), higher than 11.0% of the 33,003 registry servers that responded over HTTPS that day. Ready for Claude and MCP Registry. Not ready for ChatGPT and Gemini.

Measured facts

Score
70C
Sign-in
API key or other
Tools listed
23
Protocol version
2025-11-25
Stores

Store readiness

StoreStatusReason
Claude Connectors Directory Ready No blocking check failed.
ChatGPT app directory Not ready Blocked by Sign-in method the store supports (OAuth or none), Protected resource metadata (RFC 9728), Authorization server metadata (RFC 8414 / OIDC) and Explicit readOnlyHint, destructiveHint and openWorldHint (ChatGPT).
Gemini Connected Apps Not ready Blocked by Sign-in method the store supports (OAuth or none) and Authorization server metadata (RFC 8414 / OIDC).
Official MCP Registry Ready No blocking check failed.

MCP Registry ready means a valid public remote for the registry, not that the server is listed in a store.

Fixes

8 checks to fix

  1. Fails

    Protected resource metadata (RFC 9728)

    auth_prm

    Blocks ChatGPT.

    Measured Not found: https://scrapingbot.io/.well-known/oauth-protected-resource/api/mcp -> 404; https://scrapingbot.io/.well-known/oauth-protected-resource -> 404

    Serve RFC 9728 metadata at /.well-known/oauth-protected-resource (plus the path-suffixed form) with "resource" and "authorization_servers".

  2. Fails

    Authorization server metadata (RFC 8414 / OIDC)

    auth_as_metadata

    Blocks ChatGPT and Gemini.

    Measured Not found: https://scrapingbot.io/.well-known/oauth-authorization-server -> 404; https://scrapingbot.io/.well-known/openid-configuration -> 404

    Serve RFC 8414 metadata at <issuer>/.well-known/oauth-authorization-server with authorization_endpoint, token_endpoint and response_types_supported ["code"].

  3. Fails

    Sign-in method the store supports (OAuth or none)

    auth_method

    Blocks ChatGPT and Gemini.

    Measured unknown method: HTTP 401 and no working OAuth discovery: the server expects a credential such as an API key or static token

    ChatGPT and Gemini cannot send a static API key or token: add MCP OAuth (protected resource metadata and authorization server metadata), or serve the tools without auth. Claude accepts a static credential in a request header only in a beta

  4. Fails

    Explicit readOnlyHint, destructiveHint and openWorldHint (ChatGPT)

    tool_open_world

    Blocks ChatGPT.

    Measured 23/23 tools miss an explicit hint: listCapabilities, scrapeWebsite, extractStructuredData, getScrapeJob, pollJobUntilDone and 18 more

    Set readOnlyHint, destructiveHint and openWorldHint to explicit true/false on every tool (OpenAI app review requires all three).

  5. Fails

    401 carries WWW-Authenticate resource_metadata

    auth_challenge

    Measured unknown method: HTTP 401 without WWW-Authenticate

    On 401, send WWW-Authenticate: Bearer resource_metadata="<protected resource metadata URL>".

  6. Warning

    Tool descriptions

    tool_descriptions

    Measured 2 under 60 chars: getScrapeJob, pollJobUntilDone

    Keep each tool description between 60 and 2000 characters: when to use it, what it returns, key limits.

  7. Warning

    initialize latency

    latency

    Measured 1644 ms

    Bring initialize under 1.5 s: avoid cold starts and upstream calls in the handshake.

  8. Warning

    JSON-RPC error for unknown method

    jsonrpc_errors

    Measured HTTP 401 instead of a JSON-RPC error

    Route the method first and answer unknown methods with JSON-RPC error -32601 before the auth check, or return a JSON-RPC error body with the 401.

13 checks passed, 6 did not run

Passed. Served over HTTPS, initialize over Streamable HTTP, Supported protocol version negotiated, JSON or SSE response Content-Type, GET answers SSE or 405, serverInfo name and version, Server instructions, tools capability declared, tools/list returns tools, inputSchema is an object schema, Tool names are valid and portable, readOnlyHint or destructiveHint on every tool, Human-readable title on every tool.

Not run. Resource metadata "resource" equals the server URL, First metadata URL Gemini tries answers 200 with the required fields, issuer equals the authorization_servers entry; token_endpoint_auth_methods_supported (ChatGPT), PKCE S256 advertised, Client registration (DCR or Client ID Metadata Documents), refresh_token grant advertised. These need an OAuth sign-in flow the check could not reach.

Run a fresh check

This page is the 2 November 2026 snapshot. If you maintain this server and have shipped fixes since then, re-check it. The live check and the badge show the current result, and the next snapshot will pick up the change.

Re-check now

Badge

README badge

The badge shows the latest score for this URL and links to this report.

McpStamp score for ScrapingBot

Markdown

[![McpStamp score](https://www.mcpstamp.com/badge?url=https%3A%2F%2Fscrapingbot.io%2Fapi%2Fmcp)](https://www.mcpstamp.com/r/io-scrapingbot-scrapingbot/)

HTML

<a href="https://www.mcpstamp.com/r/io-scrapingbot-scrapingbot/"><img src="https://www.mcpstamp.com/badge?url=https%3A%2F%2Fscrapingbot.io%2Fapi%2Fmcp" alt="McpStamp score" height="20"></a>
Registry entry

About this server

Public web data for AI agents: scrape any page, plus Google, TikTok, Instagram and Amazon as JSON.
Registry name
io.scrapingbot/scrapingbot
Remote URL
https://scrapingbot.io/api/mcp
Version
1.0.0
Source
github.com/mike-scrapingbot/scrapingbot
Website
scrapingbot.io/mcp?utm_source=mcp_registry&utm_medium=registry&utm_campaign=server_json
Checked
2 November 2026, engine 1.2.0, no credentials

The description above is the server's own text from the official MCP Registry. If a result looks wrong, run a fresh check and email support@zovo.one with the report link.

More grade C servers

All grade C servers · All server reports · State of MCP readiness, November 2026