
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@site-spy/mcp-server
Advanced tools
MCP server for Site Spy — lets AI agents monitor websites for changes
MCP server that lets AI agents monitor websites for changes via Site Spy.
Track pages, get notified when content changes, view diffs and snapshots — all from your AI assistant.
Add to your AI client config:
Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"site-spy": {
"command": "npx",
"args": ["-y", "@site-spy/mcp-server"],
"env": {
"SITE_SPY_API_KEY": "your-api-key"
}
}
}
}
Claude Code (.mcp.json):
{
"mcpServers": {
"site-spy": {
"command": "npx",
"args": ["-y", "@site-spy/mcp-server"],
"env": {
"SITE_SPY_API_KEY": "your-api-key"
}
}
}
}
Cursor (.cursor/mcp.json):
{
"mcpServers": {
"site-spy": {
"command": "npx",
"args": ["-y", "@site-spy/mcp-server"],
"env": {
"SITE_SPY_API_KEY": "your-api-key"
}
}
}
}
OpenClaw (openclaw.yaml):
mcp:
servers:
site-spy:
command: "npx"
args: ["-y", "@site-spy/mcp-server"]
env:
SITE_SPY_API_KEY: "your-api-key"
Get your API key from Site Spy Dashboard → Settings → API.
If you don't set SITE_SPY_API_KEY, the agent will ask you to authenticate interactively.
| Tool | Description |
|---|---|
authenticate | Connect with an API key (if not set via env var) |
auth_status | Check authentication status |
| Tool | Description |
|---|---|
list_watches | List all monitored websites (optionally filter by tag) |
create_watch | Start monitoring a URL for changes |
get_watch | Get full details of a specific watch |
update_watch | Update config — pause/resume, change interval, rename |
delete_watch | Stop monitoring and delete a watch |
search_watches | Search watches by URL or title |
trigger_recheck | Force an immediate recheck of all watches |
| Tool | Description |
|---|---|
get_change_history | Get timestamps of detected changes |
get_snapshot | Get page content at a specific timestamp |
get_diff | Compare content between two timestamps |
| Tool | Description |
|---|---|
fetch_url | One-off authenticated URL fetch through the Site Spy backend, with browser mode |
| Tool | Description |
|---|---|
get_rss_settings | Get current RSS feed settings and token |
generate_rss_token | Generate or regenerate an RSS feed token for feed URLs |
revoke_rss_token | Revoke the RSS token, disabling all feed access |
| Tool | Description |
|---|---|
list_tags | List all tags for organizing watches |
get_notifications | Get current notification settings |
Site Spy provides per-user RSS feeds so you can subscribe to change notifications in any RSS reader.
Once you have a token (via generate_rss_token), feed URLs follow this pattern:
https://sitespy.app/api/rss?token={token}https://sitespy.app/api/rss/watch/{watch_uuid}?token={token}https://sitespy.app/api/rss/tag/{tag_uuid}?token={token}| Variable | Description | Default |
|---|---|---|
SITE_SPY_API_KEY | API key for authentication | — (interactive auth) |
SITE_SPY_API_URL | Backend API URL | https://detect.coolify.vkuprin.com/api/v1 |
SITE_SPY_AUTH_URL | URL shown to users for getting API keys | https://sitespy.app/dashboard |
The backend fetch_url endpoint can be restricted with FETCH_URL_API_ENABLED,
FETCH_URL_REQUIRE_MASTER_ADMIN, or FETCH_URL_ALLOWED_API_KEYS.
Full documentation is available at docs.sitespy.app.
Once configured, try asking your AI assistant:
ISC
FAQs
MCP server for Site Spy — lets AI agents monitor websites for changes
The npm package @site-spy/mcp-server receives a total of 17 weekly downloads. As such, @site-spy/mcp-server popularity was classified as not popular.
We found that @site-spy/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.