A security-focused, read-only MCP server for Google Search Console data.
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"gsc-readonly-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# Google Search Console MCP **GSC MCP** is a small, security-focused Model Context Protocol server for first-party Google Search Console data. It exposes property discovery, Search Analytics, and URL Inspection through the official Google APIs. The server is structurally read-only: it contains no write tools and requests only Google's `webmasters.readonly` OAuth scope. ## Tools | Tool | Purpose | Google request | |---|---|---| | `list_sites` | List accessible Search Console properties | `GET /webmasters/v3/sites` | | `query_search_analytics` | Query clicks, impressions, CTR, position, and dimensions | `POST .../searchAnalytics/query` | | `inspect_url` | Read the indexed state of a URL | `POST /v1/urlInspection/index:inspect` | The two `POST` endpoints are read operations. The implementation blocks site, sitemap, Indexing API, arbitrary HTTP, and all other non-allowlisted requests. Every tool is annotated with `readOnlyHint=true` and `destructiveHint=false`. ## Requirements - Python 3.10 or newer - Google Search Console API enabled for your Google Cloud project - Application Default Credentials (ADC) with access to the properties you query - The read-only OAuth scope: `https://www.googleapis.com/auth/webmasters.readonly` Google's Search Console API requires OAuth 2.0 for private user data. Follow the [official Search Console authorization guide](https://developers.google.com/webmaster-tools/v1/how-tos/authorizing) and [ADC setup guide](https://docs.cloud.google.com/docs/authentication/provide-credentials-adc). Keep OAuth client files, service-account keys, ADC files, and tokens outside the repository. ## Install from PyPI With `uv`: ```console uvx --from gsc-readonly-mcp gsc-mcp ``` With `pipx`: ```console pipx install gsc-readonly-mcp gsc-mcp ``` With `pip` in a virtual environment: ```console python -m venv .venv python -m pip install gsc-readonly-mcp gsc-mcp ``` The PyPI distribution is named `gsc-readonly-mcp`; the installed command and short p…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.