Website Check in Claude and ChatGPT
Ask Claude or ChatGPT to check a website and get the same free, plain-language safety summary as on this site. The check reads only public pages and public records. Nothing is installed and no login is needed.
Add it to Claude
- Open Settings, then Connectors.
- Find Website Check in the directory and connect it. If it is not
listed yet, choose Add custom connector and enter
https://api.website-builder.puppilot.co/mcp. - In a chat, turn on Website Check in the tools menu.
Add it to ChatGPT
- Find Website Check in the app directory and connect it.
- In a chat, pick the app or mention it by name, then ask your question.
Developers can also add it in developer mode with the address https://api.website-builder.puppilot.co/mcp.
What to ask
- Run a website check on yourclinic.com
- Check the website safety of yourclinic.com
- Is my clinic's website, yourclinic.com, running out-of-date software?
- Does yourclinic.com have email spoofing protection?
Include the website address. Claude or ChatGPT runs the check when your question is about the site's safety, software, secure connection, domain or email protection.
What it checks
- Out-of-date software: WordPress core, plugins and themes, Joomla, Drupal and PHP, compared with public data from Wordfence Intelligence, the CISA Known Exploited Vulnerabilities list and endoflife.date.
- Secure connection: whether HTTPS works, when the certificate expires, whether visitors are sent to the secure version, and files loaded without encryption.
- Browser protections: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and Referrer-Policy.
- Domain: how soon the domain registration expires.
- Email: whether SPF and DMARC records protect the domain against email that pretends to come from it.
What you get
Results grouped as Urgent, Important, Good to fix and Working, each with one plain sentence. The summary leaves out software names and version numbers. The Get full details link opens this site, where the full details (software versions, known flaws with their CVE IDs, and the evidence behind each result) are emailed only to an address at the checked site's domain or one published on the site.
Limits
- It reads only what a browser or email server can see: no login attempts, no attack tests, nothing on the site is changed.
- Sites that block automated visitors, or that don't answer, are reported as such.
- A clean result means none of these checks found a problem. It is not a full security audit.
- Each person and each network can run a limited number of checks per hour.
Privacy and support
What we keep and for how long: the Website Check privacy notice. The rules for using it: the terms of use. Questions or problems: support-website-check@puppilot.co.