{
  "data": {
    "similar": [
      {
        "grade": "BB",
        "json": "https://www.anchorterminal.com/tools/datocms.json",
        "name": "DatoCMS",
        "score": 74.4,
        "shared": null,
        "slug": "datocms"
      },
      {
        "grade": "BB",
        "json": "https://www.anchorterminal.com/tools/sanity.json",
        "name": "Sanity",
        "score": 72.7,
        "shared": null,
        "slug": "sanity"
      },
      {
        "grade": "BB",
        "json": "https://www.anchorterminal.com/tools/cosmic.json",
        "name": "Cosmic",
        "score": 72.5,
        "shared": null,
        "slug": "cosmic"
      },
      {
        "grade": "BB",
        "json": "https://www.anchorterminal.com/tools/kontent-ai.json",
        "name": "Kontent.ai",
        "score": 70.6,
        "shared": null,
        "slug": "kontent-ai"
      },
      {
        "grade": "BB",
        "json": "https://www.anchorterminal.com/tools/webflow.json",
        "name": "Webflow",
        "score": 70.4,
        "shared": null,
        "slug": "webflow"
      },
      {
        "grade": "B",
        "json": "https://www.anchorterminal.com/tools/strapi.json",
        "name": "Strapi",
        "score": 67.7,
        "shared": null,
        "slug": "strapi"
      }
    ],
    "tool": {
      "slug": "cookieyes-mcp",
      "name": "CookieYes MCP Server",
      "vendor": "CookieYes Limited",
      "vendorUrl": "https://www.cookieyes.com",
      "kind": "mcp",
      "category": "cms",
      "summary": "CookieYes' hosted MCP server lets an agent list sites, check whether cookie banners are live, read scan and GDPR or CCPA compliance results, start cookie scans and change banner colours and layout, over OAuth 2.1.",
      "url": "https://www.anchorterminal.com/tools/cookieyes-mcp",
      "markdownUrl": "https://www.anchorterminal.com/tools/cookieyes-mcp.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cookieyes-mcp.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cookieyes-mcp.json",
      "dns": "cookieyes-mcp.grade.anchorterminal.com",
      "transports": [
        "streamable-http"
      ],
      "remoteUrl": "https://app.cookieyes.com/mcp",
      "packages": [],
      "auth": "oauth",
      "authNotes": "OAuth 2.1 with PKCE issuing a scoped token. The account owner must first turn on 'Enable OAuth-based access' under MCP access, and can turn it off for every client.",
      "pricing": "freemium",
      "pricingNotes": "Works on every plan, including Free, with plan-based limits on some tools. Paid plans from $10 a month with a 14-day free trial; annual billing gives two months free (checked 2026-11-07).",
      "priceSummary": "Freemium",
      "where": "hosted",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 on the MCP docs or pricing page (checked 2026-11-07).",
        "endpoints": []
      },
      "toolCount": 10,
      "popularity": {
        "githubStars": null,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-11-07"
      },
      "docsUrl": "https://www.cookieyes.com/documentation/mcp-server/",
      "registryName": "com.cookieyes/mcp",
      "capabilities": [
        "compliance.cookies",
        "compliance.gdpr",
        "web.scan"
      ],
      "tags": [
        "official",
        "hosted",
        "mcp",
        "remote-mcp",
        "oauth",
        "freemium",
        "free-tier",
        "mcp-registry"
      ],
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 47.5,
        "grade": "D",
        "agentReady": false,
        "rank": 1153,
        "ranked": true,
        "rankOf": 1510,
        "categoryRank": 17,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 66,
          "maintenance": 53,
          "payments": 30,
          "reliability": 30,
          "schema": 46,
          "security": 61,
          "transparency": 48
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "breakdown": [
          {
            "key": "reliability",
            "name": "Reliability",
            "weight": 16,
            "effectiveWeight": 20,
            "score": 30,
            "points": 6,
            "reason": "A status page at status.cookieyes.com that renders only with script, so components and history weren't read (10 of 20). No history (5). Plan-based tool limits mentioned without numbers (5 of 15). No retry guidance (0). No SLA found (0). Not labelled beta (10). 10 + 5 + 5 + 0 + 0 + 10 = 30.",
            "checked": "2026-11-07"
          },
          {
            "key": "performance",
            "name": "Performance",
            "weight": 10,
            "effectiveWeight": 0,
            "pending": true,
            "points": 0,
            "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes."
          },
          {
            "key": "schema",
            "name": "Schema \u0026 documentation",
            "weight": 13,
            "effectiveWeight": 16.25,
            "score": 46,
            "points": 7.48,
            "reason": "Schemas not read without sign-in (15 of 25). No llms.txt found in the pages read (0). A table gives each of the 10 tools a type and a description, with example prompts (15 of 20). Inputs not verifiable (5 of 15). Example prompts for every tool, FAQ on connection errors (8 of 15). Registry version 1.0.0, no changelog (3 of 15). 15 + 0 + 15 + 5 + 8 + 3 = 46.",
            "checked": "2026-11-07"
          },
          {
            "key": "ergonomics",
            "name": "Agent ergonomics",
            "weight": 13,
            "effectiveWeight": 16.25,
            "score": 66,
            "points": 10.73,
            "reason": "10 tools (25). Domain-scoped calls; no paging needed for the data involved (10 of 20). Connection errors covered in the FAQ (8 of 20). Every tool marked Read-only or Write, with client confirmation for writes (15 of 20). Few inputs; no SDKs (8 of 15). 25 + 10 + 8 + 15 + 8 = 66.",
            "checked": "2026-11-07"
          },
          {
            "key": "security",
            "name": "Security \u0026 auth",
            "weight": 14,
            "effectiveWeight": 17.5,
            "score": 61,
            "points": 10.68,
            "reason": "OAuth 2.1 with PKCE and a scoped token, behind an owner switch (28 of 30). Seven of ten tools are read-only, the owner can turn MCP off, and writes are confirmed in the client (15 of 20). Personal data, consent logs and cookie values are never exposed to the server (10). No audit log found (0). security.txt points to the support address; no certifications read (8 of 20). 28 + 15 + 10 + 0 + 8 = 61.",
            "checked": "2026-11-07"
          },
          {
            "key": "payments",
            "name": "Payments \u0026 pricing",
            "weight": 10,
            "effectiveWeight": 12.5,
            "score": 30,
            "points": 3.75,
            "reason": "No machine payment protocol (0). Plan prices public (10). Free plan, MCP included (20). A person signs up and an owner enables access (0). 0 + 10 + 20 + 0 = 30.",
            "checked": "2026-11-07"
          },
          {
            "key": "tasks",
            "name": "Task success",
            "weight": 10,
            "effectiveWeight": 0,
            "pending": true,
            "points": 0,
            "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored."
          },
          {
            "key": "maintenance",
            "name": "Maintenance \u0026 community",
            "weight": 7,
            "effectiveWeight": 8.75,
            "score": 53,
            "points": 4.64,
            "reason": "Registry entry com.cookieyes/mcp updated 2 November 2026 (30). No dated releases found (0). Documentation and support; no changelog (8 of 15). Official registry entry under its own namespace (15). No package to read (0). 30 + 0 + 8 + 15 + 0 = 53. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.",
            "checked": "2026-11-07"
          },
          {
            "key": "transparency",
            "name": "Transparency \u0026 trust",
            "weight": 7,
            "effectiveWeight": 8.75,
            "score": 48,
            "points": 4.2,
            "note": "editorial 35, provenance 61",
            "reason": "Closed service; the privacy policy names CookieYes Limited under EU and UK data protection law; terms not found at /terms-of-service/ (10 of 30). Personal data deleted on account closure, otherwise kept as long as needed (20 of 30). No deprecation policy (0). Service providers described by role, no list (5 of 20). 10 + 20 + 0 + 5 = 35.",
            "checked": "2026-11-07"
          }
        ],
        "assessment": {
          "date": "2026-11-07",
          "basis": "public evidence",
          "confidence": "medium",
          "notes": {
            "ergonomics": "10 tools (25). Domain-scoped calls; no paging needed for the data involved (10 of 20). Connection errors covered in the FAQ (8 of 20). Every tool marked Read-only or Write, with client confirmation for writes (15 of 20). Few inputs; no SDKs (8 of 15). 25 + 10 + 8 + 15 + 8 = 66.",
            "maintenance": "Registry entry com.cookieyes/mcp updated 2 November 2026 (30). No dated releases found (0). Documentation and support; no changelog (8 of 15). Official registry entry under its own namespace (15). No package to read (0). 30 + 0 + 8 + 15 + 0 = 53. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.",
            "payments": "No machine payment protocol (0). Plan prices public (10). Free plan, MCP included (20). A person signs up and an owner enables access (0). 0 + 10 + 20 + 0 = 30.",
            "reliability": "A status page at status.cookieyes.com that renders only with script, so components and history weren't read (10 of 20). No history (5). Plan-based tool limits mentioned without numbers (5 of 15). No retry guidance (0). No SLA found (0). Not labelled beta (10). 10 + 5 + 5 + 0 + 0 + 10 = 30.",
            "schema": "Schemas not read without sign-in (15 of 25). No llms.txt found in the pages read (0). A table gives each of the 10 tools a type and a description, with example prompts (15 of 20). Inputs not verifiable (5 of 15). Example prompts for every tool, FAQ on connection errors (8 of 15). Registry version 1.0.0, no changelog (3 of 15). 15 + 0 + 15 + 5 + 8 + 3 = 46.",
            "security": "OAuth 2.1 with PKCE and a scoped token, behind an owner switch (28 of 30). Seven of ten tools are read-only, the owner can turn MCP off, and writes are confirmed in the client (15 of 20). Personal data, consent logs and cookie values are never exposed to the server (10). No audit log found (0). security.txt points to the support address; no certifications read (8 of 20). 28 + 15 + 10 + 0 + 8 = 61.",
            "transparency": "Closed service; the privacy policy names CookieYes Limited under EU and UK data protection law; terms not found at /terms-of-service/ (10 of 30). Personal data deleted on account closure, otherwise kept as long as needed (20 of 30). No deprecation policy (0). Service providers described by role, no list (5 of 20). 10 + 20 + 0 + 5 = 35."
          },
          "sources": [
            {
              "what": "MCP server docs",
              "url": "https://www.cookieyes.com/documentation/mcp-server/",
              "seen": "2026-11-07"
            },
            {
              "what": "pricing",
              "url": "https://www.cookieyes.com/pricing/",
              "seen": "2026-11-07"
            },
            {
              "what": "privacy policy",
              "url": "https://www.cookieyes.com/privacy-policy/",
              "seen": "2026-11-07"
            },
            {
              "what": "security.txt",
              "url": "https://www.cookieyes.com/.well-known/security.txt",
              "seen": "2026-11-07"
            },
            {
              "what": "lead, awesome-remote-mcp-servers pull request #3626",
              "url": "https://github.com/punkpeye/awesome-remote-mcp-servers/pull/3626",
              "seen": "2026-11-07"
            }
          ],
          "openQuestions": [
            "Terms and certifications not read",
            "People, ownership and investors not researched"
          ]
        },
        "negative": 0,
        "verdict": "CookieYes' MCP server is small and careful, with 10 tools marked read-only or write, OAuth 2.1 behind an owner switch, and no personal data or consent logs exposed. It's on the Free plan too. Little else is published, no changelog, limits or llms.txt, and the status page needs script to read.",
        "bestFor": "Site owners and agencies on CookieYes who want an agent to check banners and compliance across their sites.",
        "strengths": [
          "10 tools, each marked read-only or write",
          "OAuth 2.1 with PKCE behind an account-owner switch",
          "Personal data, consent logs and cookie values are never exposed",
          "Available on the Free plan"
        ],
        "weaknesses": [
          "No changelog or published limits",
          "No audit log of agent calls",
          "Status page unreadable without script",
          "Terms not found at the usual path"
        ],
        "agentNotes": [
          "Ask the account owner to enable OAuth-based access first",
          "Confirm with the user before changing banner colours or layout",
          "Run trigger_cookie_scan, then read get_scan_results once it finishes"
        ],
        "metrics": {
          "kind": "remote",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "D",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 47.5
          }
        ],
        "editorialScores": {
          "ergonomics": 66,
          "maintenance": 53,
          "payments": 30,
          "reliability": 30,
          "schema": 46,
          "security": 61,
          "transparency": 35
        },
        "provenanceScore": 61,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-07",
            "maintenance": "2026-11-07",
            "payments": "2026-11-07",
            "reliability": "2026-11-07",
            "schema": "2026-11-07",
            "security": "2026-11-07",
            "transparency": "2026-11-07"
          },
          "last": "2026-11-07",
          "oldest": "2026-11-07",
          "stale": false,
          "staleAfterDays": 90
        },
        "scoreHistory": [
          {
            "date": "2026-11-07",
            "grade": "D",
            "kind": "listed",
            "method": "0.7",
            "score": 47.5
          }
        ]
      },
      "connect": {
        "claudeCode": "claude mcp add cookieyes --transport http https://app.cookieyes.com/mcp",
        "config": {
          "mcpServers": {
            "cookieyes": {
              "url": "https://app.cookieyes.com/mcp"
            }
          }
        }
      },
      "letme": {
        "capability": "https://letme.dev/compliance.cookies",
        "tool": "https://letme.dev/cookieyes-mcp"
      },
      "notable": [
        "Tools list_domains, get_website_details, get_embed_code, list_banners, get_banner_status, update_banner_colours, update_banner_layout, get_scan_results, get_compliance_status and trigger_cookie_scan (https://www.cookieyes.com/documentation/mcp-server/)",
        "Works on all plans, including Free, with plan-based usage limits on some tools (https://www.cookieyes.com/documentation/mcp-server/)",
        "Personal data, consent logs and cookie values are never exposed to the server (https://www.cookieyes.com/documentation/mcp-server/)"
      ],
      "area": "business",
      "details": [
        {
          "label": "Surface listed",
          "value": "The hosted MCP server at app.cookieyes.com/mcp, read from cookieyes.com on 7 November 2026. Only an MCP initialize was sent, which asked for sign-in"
        },
        {
          "label": "Category",
          "value": "cms, since it changes what a website shows; there is no consent-management category"
        }
      ],
      "provenance": {
        "legalEntity": "CookieYes Limited",
        "domain": "cookieyes.com",
        "domainRegistered": "",
        "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.",
        "endpointOnVendorDomain": true,
        "terms": "",
        "privacy": "https://www.cookieyes.com/privacy-policy/",
        "statusPage": "https://status.cookieyes.com",
        "changelog": "",
        "securityTxt": "valid",
        "checked": "2026-11-07",
        "notes": [
          "security.txt lists support@cookieyes.com and expires 7 May 2027.",
          "The terms weren't found at /terms-of-service/."
        ],
        "score": 61,
        "checks": [
          {
            "check": "Legal entity named",
            "value": "CookieYes Limited",
            "points": 20,
            "max": 20,
            "state": "ok"
          },
          {
            "check": "Domain age",
            "value": "cookieyes.com, no registry record we could read",
            "points": 0,
            "max": 15,
            "state": "no"
          },
          {
            "check": "Endpoint on the vendor's domain",
            "value": "app.cookieyes.com",
            "points": 15,
            "max": 15,
            "state": "ok"
          },
          {
            "check": "Terms of service",
            "value": "not found",
            "points": 0,
            "max": 10,
            "state": "no"
          },
          {
            "check": "Privacy policy",
            "value": "published, not read by us yet",
            "points": 4,
            "max": 10,
            "state": "part"
          },
          {
            "check": "Status page",
            "value": "status.cookieyes.com",
            "points": 10,
            "max": 10,
            "state": "ok"
          },
          {
            "check": "Changelog",
            "value": "not found",
            "points": 0,
            "max": 10,
            "state": "no"
          },
          {
            "check": "security.txt",
            "value": "valid",
            "points": 10,
            "max": 10,
            "state": "ok"
          },
          {
            "check": "People named",
            "value": "not researched yet",
            "points": 0,
            "max": 0,
            "state": "na"
          },
          {
            "check": "Support route",
            "value": "help pages",
            "points": 5,
            "max": 5,
            "state": "ok"
          }
        ]
      },
      "humans": {
        "slug": "cookieyes-mcp",
        "checked": "2026-11-07",
        "company": "CookieYes Limited",
        "peopleNote": "People, ownership and investors weren't researched in this batch (7 November 2026, leads from the awesome-remote-mcp-servers pull requests).",
        "companySocial": {},
        "support": {
          "urls": [
            "https://www.cookieyes.com/documentation/mcp-server/"
          ]
        },
        "sources": [
          "https://www.cookieyes.com/documentation/mcp-server/"
        ]
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/cookieyes-mcp.json",
      "live": {
        "slug": "cookieyes-mcp",
        "probe": {
          "target": "https://app.cookieyes.com/mcp",
          "method": "mcp-initialize",
          "lastAt": "2026-11-08T00:43:29.422187546Z",
          "lastOk": true,
          "lastStatus": 401,
          "lastMs": 52,
          "lastNote": "asks for credentials",
          "authRequired": true,
          "uptime24h": 100,
          "uptime30d": 100,
          "p50ms24h": 84,
          "p95ms24h": 157,
          "samples24h": 61,
          "samples30d": 61,
          "days": [
            {
              "date": "2026-11-07",
              "probes": 53,
              "ok": 53
            },
            {
              "date": "2026-11-08",
              "probes": 8,
              "ok": 8
            }
          ]
        },
        "vendorStatus": {
          "page": "https://status.cookieyes.com",
          "indicator": "unknown",
          "summary": "no machine-readable status found",
          "checkedAt": "2026-11-08T00:31:10.567584839Z"
        },
        "updatedAt": "2026-11-08T00:43:29.422187546Z"
      }
    },
    "verify": {
      "accepts": "a page on cookieyes.com or one of its subdomains",
      "badgeUrl": "https://www.anchorterminal.com/badges/cookieyes-mcp.svg",
      "body": {
        "slug": "cookieyes-mcp",
        "url": "the page with the badge or the link"
      },
      "docs": "https://www.anchorterminal.com/builders/#verify",
      "effect": "none, it never changes a grade, rank or review",
      "endpoint": "https://www.anchorterminal.com/api/v1/verify",
      "listingUrl": "https://www.anchorterminal.com/tools/cookieyes-mcp",
      "mcpTool": "verify_listing",
      "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it",
      "snippets": {
        "html": "\u003ca href=\"https://www.anchorterminal.com/tools/cookieyes-mcp\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/cookieyes-mcp.svg\" alt=\"CookieYes MCP Server on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e",
        "markdown": "[![CookieYes MCP Server on Anchor Terminal](https://www.anchorterminal.com/badges/cookieyes-mcp.svg)](https://www.anchorterminal.com/tools/cookieyes-mcp)",
        "link": "\u003ca href=\"https://www.anchorterminal.com/tools/cookieyes-mcp\"\u003eCookieYes MCP Server on Anchor Terminal\u003c/a\u003e"
      }
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/tools/cookieyes-mcp",
    "json": "https://www.anchorterminal.com/tools/cookieyes-mcp.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/tools/cookieyes-mcp.md",
    "mcp": "https://www.anchorterminal.com/mcp",
    "pricing": "https://www.anchorterminal.com/tools/cookieyes-mcp#pricing",
    "reviews": "https://www.anchorterminal.com/tools/cookieyes-mcp#reviews",
    "slim": "https://www.anchorterminal.com/tools/cookieyes-mcp.min.md"
  },
  "markdown": "## Overview\n\n**Grade D · 47.5/100 · rank #1153 of 1510 · #17 in CMS \u0026 website publishing · not agent-ready · confidence medium**\n\n\n## Assessment\n\nCookieYes' MCP server is small and careful, with 10 tools marked read-only or write, OAuth 2.1 behind an owner switch, and no personal data or consent logs exposed. It's on the Free plan too. Little else is published, no changelog, limits or llms.txt, and the status page needs script to read.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | CookieYes Limited (https://www.cookieyes.com) |\n| Kind | MCP server |\n| Category | CMS \u0026 website publishing (https://www.anchorterminal.com/categories/cms) |\n| Transport | Streamable HTTP |\n| Endpoint | `https://app.cookieyes.com/mcp` |\n| Auth | OAuth · OAuth 2.1 with PKCE issuing a scoped token. The account owner must first turn on 'Enable OAuth-based access' under MCP access, and can turn it off for every client. |\n| Pricing | Freemium (Freemium) · Works on every plan, including Free, with plan-based limits on some tools. Paid plans from $10 a month with a 14-day free trial; annual billing gives two months free (checked 2026-11-07). |\n| x402 | No · No x402, MPP or L402 on the MCP docs or pricing page (checked 2026-11-07). |\n| Licence | unknown |\n| Tools exposed | 10 |\n| MCP registry name | `com.cookieyes/mcp` |\n| Docs | https://www.cookieyes.com/documentation/mcp-server/ |\n| llms.txt | not found |\n| Surface listed | The hosted MCP server at app.cookieyes.com/mcp, read from cookieyes.com on 7 November 2026. Only an MCP initialize was sent, which asked for sign-in |\n| Category | cms, since it changes what a website shows; there is no consent-management category |\n| Capabilities | compliance.cookies, compliance.gdpr, web.scan |\n| Tags | official, hosted, mcp, remote-mcp, oauth, freemium, free-tier, mcp-registry |\n| JSON | https://www.anchorterminal.com/api/v1/tools/cookieyes-mcp.json |\n\n## Score breakdown (methodology v0.7, October 2026 research run)\n\nAssessed 2026-11-07 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 30 | 6.0 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 46 | 7.5 |\n| Agent ergonomics | 13% | 16.2 | 66 | 10.7 |\n| Security \u0026 auth | 14% | 17.5 | 61 | 10.7 |\n| Payments \u0026 pricing | 10% | 12.5 | 30 | 3.8 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 53 | 4.6 |\n| Transparency \u0026 trust (editorial 35, provenance 61) | 7% | 8.8 | 48 | 4.2 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **47.5 → D** |\n\n### Why each score\n\n- Reliability 30 (checked 2026-11-07): A status page at status.cookieyes.com that renders only with script, so components and history weren't read (10 of 20). No history (5). Plan-based tool limits mentioned without numbers (5 of 15). No retry guidance (0). No SLA found (0). Not labelled beta (10). 10 + 5 + 5 + 0 + 0 + 10 = 30.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 46 (checked 2026-11-07): Schemas not read without sign-in (15 of 25). No llms.txt found in the pages read (0). A table gives each of the 10 tools a type and a description, with example prompts (15 of 20). Inputs not verifiable (5 of 15). Example prompts for every tool, FAQ on connection errors (8 of 15). Registry version 1.0.0, no changelog (3 of 15). 15 + 0 + 15 + 5 + 8 + 3 = 46.\n- Agent ergonomics 66 (checked 2026-11-07): 10 tools (25). Domain-scoped calls; no paging needed for the data involved (10 of 20). Connection errors covered in the FAQ (8 of 20). Every tool marked Read-only or Write, with client confirmation for writes (15 of 20). Few inputs; no SDKs (8 of 15). 25 + 10 + 8 + 15 + 8 = 66.\n- Security \u0026 auth 61 (checked 2026-11-07): OAuth 2.1 with PKCE and a scoped token, behind an owner switch (28 of 30). Seven of ten tools are read-only, the owner can turn MCP off, and writes are confirmed in the client (15 of 20). Personal data, consent logs and cookie values are never exposed to the server (10). No audit log found (0). security.txt points to the support address; no certifications read (8 of 20). 28 + 15 + 10 + 0 + 8 = 61.\n- Payments \u0026 pricing 30 (checked 2026-11-07): No machine payment protocol (0). Plan prices public (10). Free plan, MCP included (20). A person signs up and an owner enables access (0). 0 + 10 + 20 + 0 = 30.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 53 (checked 2026-11-07): Registry entry com.cookieyes/mcp updated 2 November 2026 (30). No dated releases found (0). Documentation and support; no changelog (8 of 15). Official registry entry under its own namespace (15). No package to read (0). 30 + 0 + 8 + 15 + 0 = 53. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.\n- Transparency \u0026 trust 48 (checked 2026-11-07): Closed service; the privacy policy names CookieYes Limited under EU and UK data protection law; terms not found at /terms-of-service/ (10 of 30). Personal data deleted on account closure, otherwise kept as long as needed (20 of 30). No deprecation policy (0). Service providers described by role, no list (5 of 20). 10 + 20 + 0 + 5 = 35.\n\nFix list, everything this grade says the listing lacks, the biggest gain first (13 items). What it covers is at https://www.anchorterminal.com/fixes/cookieyes-mcp.md (JSON https://www.anchorterminal.com/fixes/cookieyes-mcp.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{\"listing\": \"cookieyes-mcp\", \"plan\": \"read\"}`, free while the beta runs\n\n### What we couldn't check\n\n- Terms and certifications not read\n- People, ownership and investors not researched\n\n### Sources\n\n- MCP server docs: \u003chttps://www.cookieyes.com/documentation/mcp-server/\u003e (seen 2026-11-07)\n- pricing: \u003chttps://www.cookieyes.com/pricing/\u003e (seen 2026-11-07)\n- privacy policy: \u003chttps://www.cookieyes.com/privacy-policy/\u003e (seen 2026-11-07)\n- security.txt: \u003chttps://www.cookieyes.com/.well-known/security.txt\u003e (seen 2026-11-07)\n- lead, awesome-remote-mcp-servers pull request #3626: \u003chttps://github.com/punkpeye/awesome-remote-mcp-servers/pull/3626\u003e (seen 2026-11-07)\n\n## Score history\n\nEvery move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/cookieyes-mcp/history.json\n\n- 2026-11-07: graded 47.5 D (methodology 0.7)\n\n## Who's behind it (provenance 61/100, checked 2026-11-07)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | CookieYes Limited | 20/20 |\n| Domain age | cookieyes.com, no registry record we could read | 0/15 |\n| Endpoint on the vendor's domain | app.cookieyes.com | 15/15 |\n| Terms of service | not found | 0/10 |\n| Privacy policy | published, not read by us yet | 4/10 |\n| Status page | status.cookieyes.com | 10/10 |\n| Changelog | not found | 0/10 |\n| security.txt | valid | 10/10 |\n| People named | not researched yet | n/a |\n| Support route | help pages | 5/5 |\n\nNot looked up: RDAP isn't requested under the 1 November 2026 rules.\n\nsecurity.txt lists support@cookieyes.com and expires 7 May 2027.\n\nThe terms weren't found at /terms-of-service/.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service**. We found no terms of service published for this product, so there is nothing to read and the check scores 0.\n\n\n**Privacy policy** (https://www.cookieyes.com/privacy-policy/), not read yet.\n\n\n## Humans behind the project (researched 2026-11-07 from public pages, not part of the grade)\n\n### Key people\n\n- No people named yet.\n- Note: People, ownership and investors weren't researched in this batch (7 November 2026, leads from the awesome-remote-mcp-servers pull requests).\n\n### Getting support\n\n- Help: https://www.cookieyes.com/documentation/mcp-server/\n- Sources: https://www.cookieyes.com/documentation/mcp-server/\n\n## Live (updated 2026-11-08 00:43 UTC)\n\n- Right now: up, HTTP 401, 52 ms, checked 2026-11-08 00:43 UTC (mcp-initialize on `https://app.cookieyes.com/mcp`, asks for auth)\n- Uptime 24h 100.0% (61 probes) · 30 days 100.0% (61 probes) · p50 84 ms · p95 157 ms\n- Vendor status page: not read, no machine-readable status found\n- Always current: https://www.anchorterminal.com/api/v1/live/cookieyes-mcp.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- 10 tools, each marked read-only or write\n- OAuth 2.1 with PKCE behind an account-owner switch\n- Personal data, consent logs and cookie values are never exposed\n- Available on the Free plan\n\n## Weaknesses\n\n- No changelog or published limits\n- No audit log of agent calls\n- Status page unreadable without script\n- Terms not found at the usual path\n\n\n\n## Before you call it (notes for agents)\n\n1. Ask the account owner to enable OAuth-based access first\n2. Confirm with the user before changing banner colours or layout\n3. Run trigger_cookie_scan, then read get_scan_results once it finishes\n\n## Connect\n\nClaude Code:\n\n```bash\nclaude mcp add cookieyes --transport http https://app.cookieyes.com/mcp\n```\n\nMCP client configuration:\n\n```json\n{\n  \"mcpServers\": {\n    \"cookieyes\": {\n      \"url\": \"https://app.cookieyes.com/mcp\"\n    }\n  }\n}\n```\n\nThrough letme: https://letme.dev/cookieyes-mcp (letme picks it for compliance.cookies, the top-graded tool for the job, letme picks it for compliance.gdpr, the top-graded tool for the job, letme picks it for web.scan, the top-graded tool for the job). letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| DatoCMS | BB | 74.4 | 85 | same category (CMS \u0026 website publishing) | no | https://www.anchorterminal.com/tools/datocms.md |\n| Sanity | BB | 72.7 | 121 | same category (CMS \u0026 website publishing) | no | https://www.anchorterminal.com/tools/sanity.md |\n| Cosmic | BB | 72.5 | 124 | same category (CMS \u0026 website publishing) | no | https://www.anchorterminal.com/tools/cosmic.md |\n| Kontent.ai | BB | 70.6 | 194 | same category (CMS \u0026 website publishing) | no | https://www.anchorterminal.com/tools/kontent-ai.md |\n| Webflow | BB | 70.4 | 200 | same category (CMS \u0026 website publishing) | no | https://www.anchorterminal.com/tools/webflow.md |\n| Strapi | B | 67.7 | 309 | same category (CMS \u0026 website publishing) | no | https://www.anchorterminal.com/tools/strapi.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- Tools list_domains, get_website_details, get_embed_code, list_banners, get_banner_status, update_banner_colours, update_banner_layout, get_scan_results, get_compliance_status and trigger_cookie_scan (source: \u003chttps://www.cookieyes.com/documentation/mcp-server/\u003e)\n- Works on all plans, including Free, with plan-based usage limits on some tools (source: \u003chttps://www.cookieyes.com/documentation/mcp-server/\u003e)\n- Personal data, consent logs and cookie values are never exposed to the server (source: \u003chttps://www.cookieyes.com/documentation/mcp-server/\u003e)\n\n- #17 of 18 in Best headless CMS and website publishing for AI agents: https://www.anchorterminal.com/best/cms/index.md\n- All 136 cms comparisons: https://www.anchorterminal.com/compare/cms/index.md\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on cookieyes.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"cookieyes-mcp\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/cookieyes-mcp\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/cookieyes-mcp.svg\" alt=\"CookieYes MCP Server on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![CookieYes MCP Server on Anchor Terminal](https://www.anchorterminal.com/badges/cookieyes-mcp.svg)](https://www.anchorterminal.com/tools/cookieyes-mcp)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/cookieyes-mcp\"\u003eCookieYes MCP Server on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say CookieYes MCP Server is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/cookieyes-mcp-dark.png\n- Light: https://www.anchorterminal.com/assets/share/cookieyes-mcp-light.png\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-08",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Terminal",
        "url": "https://www.anchorterminal.com/tools/"
      },
      {
        "name": "CMS \u0026 website publishing",
        "url": "https://www.anchorterminal.com/categories/cms"
      },
      {
        "name": "CookieYes MCP Server",
        "url": ""
      }
    ],
    "description": "CookieYes' hosted MCP server lets an agent list sites, check whether cookie banners are live, read scan and GDPR or CCPA compliance results, start cookie scans and change banner colours and layout, over OAuth 2.1.",
    "facts": [
      "rank #1153 of 1510",
      "OAuth auth",
      "0 desk reviews"
    ],
    "h1": "CookieYes MCP Server",
    "image": "https://www.anchorterminal.com/assets/og/tools-cookieyes-mcp.png",
    "path": "/tools/cookieyes-mcp",
    "published": "2026-10-01",
    "section": "tools",
    "title": "CookieYes review (2026): pricing, alternatives and grade D",
    "toc": null,
    "updated": "2026-11-08",
    "url": "https://www.anchorterminal.com/tools/cookieyes-mcp"
  },
  "tokens": {
    "markdown": 3850,
    "slim": 1080
  },
  "version": 1
}