
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
rankjot-mcp
Advanced tools
MCP server for real Google rankings: where a domain ranks for a keyword, plus the top 10 organic results.
Real Google rankings as a tool for AI assistants. Ask Claude (or any MCP client) "where does example.com rank for best running shoes in the UK?" and it makes a live lookup instead of guessing.
One tool:
check_rank(domain, keyword, country="us") returns
position: the domain's 1-based Google organic position, or null if it isn't
in the results checkedurl: which of the domain's pages ranksresults: the top 10 organic results (position, domain, url, title), so the
assistant can answer "who's above me?" without another callquota: lookups used and remaining this monthPositions are organic results only (ads, maps and answer boxes aren't counted),
for the Google market you pass as country.
1. Get an API key. Sign in at rankjot.com, open Account → API access → Generate key. Free accounts include 25 lookups a month; the API plan ($20/mo) includes 5,000.
2. Add the server to your client. It runs with uvx,
so there's nothing to install by hand.
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"rankjot": {
"command": "uvx",
"args": ["rankjot-mcp"],
"env": { "RANKJOT_API_KEY": "rjk_your_key_here" }
}
}
}
Any other client that launches stdio servers takes the same command, uvx rankjot-mcp, with RANKJOT_API_KEY in its environment.
Prefer pip? pip install rankjot-mcp, then use rankjot-mcp as the command.
3. Restart the client and ask a ranking question.
Failures come back as a normal result with an error field, so the assistant can
tell you what happened instead of retrying blindly:
error | Meaning |
|---|---|
config | RANKJOT_API_KEY isn't set |
unauthorized | The key is wrong or was revoked |
api_trial_limit | This month's included lookups are used up |
quota_exceeded / rate_limited | Monthly quota used, or too many calls per minute |
provider_error / network | The lookup couldn't be made; try again |
Every call spends one lookup. Models are happy to call tools in loops, so if you ask about many keywords at once, say how many lookups it may use.
The domain, keyword and country you check are sent to rankjot.com to perform the lookup. See the privacy policy.
MIT
FAQs
MCP server for real Google rankings: where a domain ranks for a keyword, plus the top 10 organic results.
We found that rankjot-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.