{
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-08",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "tool": {
    "slug": "cookieyes-mcp",
    "name": "CookieYes MCP Server",
    "vendor": "CookieYes Limited",
    "vendorUrl": "https://www.cookieyes.com",
    "kind": "mcp",
    "category": "cms",
    "summary": "CookieYes' hosted MCP server lets an agent list sites, check whether cookie banners are live, read scan and GDPR or CCPA compliance results, start cookie scans and change banner colours and layout, over OAuth 2.1.",
    "url": "https://www.anchorterminal.com/tools/cookieyes-mcp",
    "markdownUrl": "https://www.anchorterminal.com/tools/cookieyes-mcp.md",
    "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cookieyes-mcp.min.md",
    "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cookieyes-mcp.json",
    "dns": "cookieyes-mcp.grade.anchorterminal.com",
    "transports": [
      "streamable-http"
    ],
    "remoteUrl": "https://app.cookieyes.com/mcp",
    "packages": [],
    "auth": "oauth",
    "authNotes": "OAuth 2.1 with PKCE issuing a scoped token. The account owner must first turn on 'Enable OAuth-based access' under MCP access, and can turn it off for every client.",
    "pricing": "freemium",
    "pricingNotes": "Works on every plan, including Free, with plan-based limits on some tools. Paid plans from $10 a month with a 14-day free trial; annual billing gives two months free (checked 2026-11-07).",
    "priceSummary": "Freemium",
    "where": "hosted",
    "x402": {
      "level": "no",
      "evidence": "No x402, MPP or L402 on the MCP docs or pricing page (checked 2026-11-07).",
      "endpoints": []
    },
    "toolCount": 10,
    "popularity": {
      "githubStars": null,
      "npmWeekly": null,
      "pypiWeekly": null,
      "asOf": "2026-11-07"
    },
    "docsUrl": "https://www.cookieyes.com/documentation/mcp-server/",
    "registryName": "com.cookieyes/mcp",
    "capabilities": [
      "compliance.cookies",
      "compliance.gdpr",
      "web.scan"
    ],
    "tags": [
      "official",
      "hosted",
      "mcp",
      "remote-mcp",
      "oauth",
      "freemium",
      "free-tier",
      "mcp-registry"
    ],
    "graded": true,
    "anchor": {
      "graded": true,
      "score": 47.5,
      "grade": "D",
      "agentReady": false,
      "rank": 1153,
      "ranked": true,
      "rankOf": 1510,
      "categoryRank": 17,
      "methodology": "0.7",
      "run": "2026-10-01",
      "scores": {
        "ergonomics": 66,
        "maintenance": 53,
        "payments": 30,
        "reliability": 30,
        "schema": 46,
        "security": 61,
        "transparency": 48
      },
      "pending": [
        "performance",
        "tasks"
      ],
      "breakdown": [
        {
          "key": "reliability",
          "name": "Reliability",
          "weight": 16,
          "effectiveWeight": 20,
          "score": 30,
          "points": 6,
          "reason": "A status page at status.cookieyes.com that renders only with script, so components and history weren't read (10 of 20). No history (5). Plan-based tool limits mentioned without numbers (5 of 15). No retry guidance (0). No SLA found (0). Not labelled beta (10). 10 + 5 + 5 + 0 + 0 + 10 = 30.",
          "checked": "2026-11-07"
        },
        {
          "key": "performance",
          "name": "Performance",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes."
        },
        {
          "key": "schema",
          "name": "Schema \u0026 documentation",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 46,
          "points": 7.48,
          "reason": "Schemas not read without sign-in (15 of 25). No llms.txt found in the pages read (0). A table gives each of the 10 tools a type and a description, with example prompts (15 of 20). Inputs not verifiable (5 of 15). Example prompts for every tool, FAQ on connection errors (8 of 15). Registry version 1.0.0, no changelog (3 of 15). 15 + 0 + 15 + 5 + 8 + 3 = 46.",
          "checked": "2026-11-07"
        },
        {
          "key": "ergonomics",
          "name": "Agent ergonomics",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 66,
          "points": 10.73,
          "reason": "10 tools (25). Domain-scoped calls; no paging needed for the data involved (10 of 20). Connection errors covered in the FAQ (8 of 20). Every tool marked Read-only or Write, with client confirmation for writes (15 of 20). Few inputs; no SDKs (8 of 15). 25 + 10 + 8 + 15 + 8 = 66.",
          "checked": "2026-11-07"
        },
        {
          "key": "security",
          "name": "Security \u0026 auth",
          "weight": 14,
          "effectiveWeight": 17.5,
          "score": 61,
          "points": 10.68,
          "reason": "OAuth 2.1 with PKCE and a scoped token, behind an owner switch (28 of 30). Seven of ten tools are read-only, the owner can turn MCP off, and writes are confirmed in the client (15 of 20). Personal data, consent logs and cookie values are never exposed to the server (10). No audit log found (0). security.txt points to the support address; no certifications read (8 of 20). 28 + 15 + 10 + 0 + 8 = 61.",
          "checked": "2026-11-07"
        },
        {
          "key": "payments",
          "name": "Payments \u0026 pricing",
          "weight": 10,
          "effectiveWeight": 12.5,
          "score": 30,
          "points": 3.75,
          "reason": "No machine payment protocol (0). Plan prices public (10). Free plan, MCP included (20). A person signs up and an owner enables access (0). 0 + 10 + 20 + 0 = 30.",
          "checked": "2026-11-07"
        },
        {
          "key": "tasks",
          "name": "Task success",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored."
        },
        {
          "key": "maintenance",
          "name": "Maintenance \u0026 community",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 53,
          "points": 4.64,
          "reason": "Registry entry com.cookieyes/mcp updated 2 November 2026 (30). No dated releases found (0). Documentation and support; no changelog (8 of 15). Official registry entry under its own namespace (15). No package to read (0). 30 + 0 + 8 + 15 + 0 = 53. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.",
          "checked": "2026-11-07"
        },
        {
          "key": "transparency",
          "name": "Transparency \u0026 trust",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 48,
          "points": 4.2,
          "note": "editorial 35, provenance 61",
          "reason": "Closed service; the privacy policy names CookieYes Limited under EU and UK data protection law; terms not found at /terms-of-service/ (10 of 30). Personal data deleted on account closure, otherwise kept as long as needed (20 of 30). No deprecation policy (0). Service providers described by role, no list (5 of 20). 10 + 20 + 0 + 5 = 35.",
          "checked": "2026-11-07"
        }
      ],
      "assessment": {
        "date": "2026-11-07",
        "basis": "public evidence",
        "confidence": "medium",
        "notes": {
          "ergonomics": "10 tools (25). Domain-scoped calls; no paging needed for the data involved (10 of 20). Connection errors covered in the FAQ (8 of 20). Every tool marked Read-only or Write, with client confirmation for writes (15 of 20). Few inputs; no SDKs (8 of 15). 25 + 10 + 8 + 15 + 8 = 66.",
          "maintenance": "Registry entry com.cookieyes/mcp updated 2 November 2026 (30). No dated releases found (0). Documentation and support; no changelog (8 of 15). Official registry entry under its own namespace (15). No package to read (0). 30 + 0 + 8 + 15 + 0 = 53. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.",
          "payments": "No machine payment protocol (0). Plan prices public (10). Free plan, MCP included (20). A person signs up and an owner enables access (0). 0 + 10 + 20 + 0 = 30.",
          "reliability": "A status page at status.cookieyes.com that renders only with script, so components and history weren't read (10 of 20). No history (5). Plan-based tool limits mentioned without numbers (5 of 15). No retry guidance (0). No SLA found (0). Not labelled beta (10). 10 + 5 + 5 + 0 + 0 + 10 = 30.",
          "schema": "Schemas not read without sign-in (15 of 25). No llms.txt found in the pages read (0). A table gives each of the 10 tools a type and a description, with example prompts (15 of 20). Inputs not verifiable (5 of 15). Example prompts for every tool, FAQ on connection errors (8 of 15). Registry version 1.0.0, no changelog (3 of 15). 15 + 0 + 15 + 5 + 8 + 3 = 46.",
          "security": "OAuth 2.1 with PKCE and a scoped token, behind an owner switch (28 of 30). Seven of ten tools are read-only, the owner can turn MCP off, and writes are confirmed in the client (15 of 20). Personal data, consent logs and cookie values are never exposed to the server (10). No audit log found (0). security.txt points to the support address; no certifications read (8 of 20). 28 + 15 + 10 + 0 + 8 = 61.",
          "transparency": "Closed service; the privacy policy names CookieYes Limited under EU and UK data protection law; terms not found at /terms-of-service/ (10 of 30). Personal data deleted on account closure, otherwise kept as long as needed (20 of 30). No deprecation policy (0). Service providers described by role, no list (5 of 20). 10 + 20 + 0 + 5 = 35."
        },
        "sources": [
          {
            "what": "MCP server docs",
            "url": "https://www.cookieyes.com/documentation/mcp-server/",
            "seen": "2026-11-07"
          },
          {
            "what": "pricing",
            "url": "https://www.cookieyes.com/pricing/",
            "seen": "2026-11-07"
          },
          {
            "what": "privacy policy",
            "url": "https://www.cookieyes.com/privacy-policy/",
            "seen": "2026-11-07"
          },
          {
            "what": "security.txt",
            "url": "https://www.cookieyes.com/.well-known/security.txt",
            "seen": "2026-11-07"
          },
          {
            "what": "lead, awesome-remote-mcp-servers pull request #3626",
            "url": "https://github.com/punkpeye/awesome-remote-mcp-servers/pull/3626",
            "seen": "2026-11-07"
          }
        ],
        "openQuestions": [
          "Terms and certifications not read",
          "People, ownership and investors not researched"
        ]
      },
      "negative": 0,
      "verdict": "CookieYes' MCP server is small and careful, with 10 tools marked read-only or write, OAuth 2.1 behind an owner switch, and no personal data or consent logs exposed. It's on the Free plan too. Little else is published, no changelog, limits or llms.txt, and the status page needs script to read.",
      "bestFor": "Site owners and agencies on CookieYes who want an agent to check banners and compliance across their sites.",
      "strengths": [
        "10 tools, each marked read-only or write",
        "OAuth 2.1 with PKCE behind an account-owner switch",
        "Personal data, consent logs and cookie values are never exposed",
        "Available on the Free plan"
      ],
      "weaknesses": [
        "No changelog or published limits",
        "No audit log of agent calls",
        "Status page unreadable without script",
        "Terms not found at the usual path"
      ],
      "agentNotes": [
        "Ask the account owner to enable OAuth-based access first",
        "Confirm with the user before changing banner colours or layout",
        "Run trigger_cookie_scan, then read get_scan_results once it finishes"
      ],
      "metrics": {
        "kind": "remote",
        "measured": false
      },
      "reviewCount": 0,
      "avgRating": 0,
      "history": [
        {
          "basis": "public evidence",
          "confidence": "medium",
          "grade": "D",
          "methodology": "0.7",
          "pending": [
            "performance",
            "tasks"
          ],
          "run": "2026-10-01",
          "runLabel": "October 2026 research run",
          "score": 47.5
        }
      ],
      "editorialScores": {
        "ergonomics": 66,
        "maintenance": 53,
        "payments": 30,
        "reliability": 30,
        "schema": 46,
        "security": 61,
        "transparency": 35
      },
      "provenanceScore": 61,
      "checked": {
        "categories": {
          "ergonomics": "2026-11-07",
          "maintenance": "2026-11-07",
          "payments": "2026-11-07",
          "reliability": "2026-11-07",
          "schema": "2026-11-07",
          "security": "2026-11-07",
          "transparency": "2026-11-07"
        },
        "last": "2026-11-07",
        "oldest": "2026-11-07",
        "stale": false,
        "staleAfterDays": 90
      },
      "scoreHistory": [
        {
          "date": "2026-11-07",
          "grade": "D",
          "kind": "listed",
          "method": "0.7",
          "score": 47.5
        }
      ]
    },
    "connect": {
      "claudeCode": "claude mcp add cookieyes --transport http https://app.cookieyes.com/mcp",
      "config": {
        "mcpServers": {
          "cookieyes": {
            "url": "https://app.cookieyes.com/mcp"
          }
        }
      }
    },
    "letme": {
      "capability": "https://letme.dev/compliance.cookies",
      "tool": "https://letme.dev/cookieyes-mcp"
    },
    "notable": [
      "Tools list_domains, get_website_details, get_embed_code, list_banners, get_banner_status, update_banner_colours, update_banner_layout, get_scan_results, get_compliance_status and trigger_cookie_scan (https://www.cookieyes.com/documentation/mcp-server/)",
      "Works on all plans, including Free, with plan-based usage limits on some tools (https://www.cookieyes.com/documentation/mcp-server/)",
      "Personal data, consent logs and cookie values are never exposed to the server (https://www.cookieyes.com/documentation/mcp-server/)"
    ],
    "area": "business",
    "details": [
      {
        "label": "Surface listed",
        "value": "The hosted MCP server at app.cookieyes.com/mcp, read from cookieyes.com on 7 November 2026. Only an MCP initialize was sent, which asked for sign-in"
      },
      {
        "label": "Category",
        "value": "cms, since it changes what a website shows; there is no consent-management category"
      }
    ],
    "provenance": {
      "legalEntity": "CookieYes Limited",
      "domain": "cookieyes.com",
      "domainRegistered": "",
      "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.",
      "endpointOnVendorDomain": true,
      "terms": "",
      "privacy": "https://www.cookieyes.com/privacy-policy/",
      "statusPage": "https://status.cookieyes.com",
      "changelog": "",
      "securityTxt": "valid",
      "checked": "2026-11-07",
      "notes": [
        "security.txt lists support@cookieyes.com and expires 7 May 2027.",
        "The terms weren't found at /terms-of-service/."
      ],
      "score": 61,
      "checks": [
        {
          "check": "Legal entity named",
          "value": "CookieYes Limited",
          "points": 20,
          "max": 20,
          "state": "ok"
        },
        {
          "check": "Domain age",
          "value": "cookieyes.com, no registry record we could read",
          "points": 0,
          "max": 15,
          "state": "no"
        },
        {
          "check": "Endpoint on the vendor's domain",
          "value": "app.cookieyes.com",
          "points": 15,
          "max": 15,
          "state": "ok"
        },
        {
          "check": "Terms of service",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "Privacy policy",
          "value": "published, not read by us yet",
          "points": 4,
          "max": 10,
          "state": "part"
        },
        {
          "check": "Status page",
          "value": "status.cookieyes.com",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "Changelog",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "security.txt",
          "value": "valid",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "People named",
          "value": "not researched yet",
          "points": 0,
          "max": 0,
          "state": "na"
        },
        {
          "check": "Support route",
          "value": "help pages",
          "points": 5,
          "max": 5,
          "state": "ok"
        }
      ]
    },
    "humans": {
      "slug": "cookieyes-mcp",
      "checked": "2026-11-07",
      "company": "CookieYes Limited",
      "peopleNote": "People, ownership and investors weren't researched in this batch (7 November 2026, leads from the awesome-remote-mcp-servers pull requests).",
      "companySocial": {},
      "support": {
        "urls": [
          "https://www.cookieyes.com/documentation/mcp-server/"
        ]
      },
      "sources": [
        "https://www.cookieyes.com/documentation/mcp-server/"
      ]
    },
    "pageJsonUrl": "https://www.anchorterminal.com/tools/cookieyes-mcp.json",
    "live": {
      "slug": "cookieyes-mcp",
      "probe": {
        "target": "https://app.cookieyes.com/mcp",
        "method": "mcp-initialize",
        "lastAt": "2026-11-08T00:43:29.422187546Z",
        "lastOk": true,
        "lastStatus": 401,
        "lastMs": 52,
        "lastNote": "asks for credentials",
        "authRequired": true,
        "uptime24h": 100,
        "uptime30d": 100,
        "p50ms24h": 84,
        "p95ms24h": 157,
        "samples24h": 61,
        "samples30d": 61,
        "days": [
          {
            "date": "2026-11-07",
            "probes": 53,
            "ok": 53
          },
          {
            "date": "2026-11-08",
            "probes": 8,
            "ok": 8
          }
        ]
      },
      "vendorStatus": {
        "page": "https://status.cookieyes.com",
        "indicator": "unknown",
        "summary": "no machine-readable status found",
        "checkedAt": "2026-11-08T00:31:10.567584839Z"
      },
      "updatedAt": "2026-11-08T00:43:29.422187546Z"
    }
  }
}