Kurerok Yandex Webmaster Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Kurerok Yandex Webmaster Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Local-first MCP server for Yandex Webmaster. It exposes the pieces we need for Kurerok SEO operations: search query analytics, sitemap state, indexing history, pages in search, recrawl quota/submission, diagnostics, and link samples.
This project intentionally talks to the official Yandex Webmaster API directly. It was informed by the public MCP ecosystem, especially:
altrr2/yandex-tools-mcp for the multi-package Yandex API direction.theYahia/yandex-webmaster-mcp for a compact Webmaster-only surface.yandex/yandex-search-mcp-server for official Yandex MCP packaging ideas.It does not require sending OAuth tokens to a hosted third party.
Read-only:
yandex_get_useryandex_list_hostsyandex_get_host_summaryyandex_get_diagnosticsyandex_get_sitemapsyandex_get_search_queriesyandex_get_indexing_historyyandex_get_pages_in_search_historyyandex_get_search_events_samplesyandex_get_recrawl_quotayandex_get_recrawl_queueyandex_get_external_linksyandex_get_broken_internal_linksState-changing, quota-sensitive:
yandex_add_sitemapyandex_submit_recrawl_urlsBoth require confirmed: true.
npm install
npm run buildCreate a Yandex OAuth application with Yandex Webmaster API access and set:
export YANDEX_WEBMASTER_TOKEN="..."
export YANDEX_WEBMASTER_HOST_ID="https:kurerok.ru:443"Codex/Claude MCP config:
{
"mcpServers": {
"kurerok-yandex-webmaster": {
"command": "node",
"args": ["/absolute/path/to/kurerok-yandex-webmaster-mcp/dist/index.js"],
"env": {
"YANDEX_WEBMASTER_TOKEN": "use-env-or-secret-manager",
"YANDEX_WEBMASTER_HOST_ID": "https:kurerok.ru:443"
}
}
}
}confirmed: true.OAuth, matching Yandex API examples.Recommended daily/weekly sequence:
yandex_get_sitemapsyandex_get_recrawl_quotayandex_get_search_queriesyandex_get_pages_in_search_historyyandex_get_indexing_historyyandex_submit_recrawl_urls with confirmed: true.Do not bulk-submit weak external-apply or low-value pages before fixing the Yandex vacancies feed and JobPosting/directApply semantics.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.