CookieRisk Quickscan

What CookieRisk Quickscan does

CookieRisk Quickscan exposes CookieRisk's homepage scanning workflow through MCP. It examines a public homepage for cookies and tracking activity observed before consent interaction, giving an agent a way to request a scan and inspect its result without implementing the scanning API directly.

The service is designed for a single public homepage rather than a broad compliance or monitoring workflow. Its scope excludes private pages, legal determinations, accept/reject behavior testing, ongoing monitoring, and bulk scanning.

How it works

An agent first calls start_quickscan with a public homepage. The response includes a scan ID. When recent evidence can be reused, the response can also identify when that evidence was collected and when the domain's cooldown period ends.

The agent then passes the scan ID to get_quickscan_result. That call can return scan progress or sanitized findings, depending on the scan state. Findings may include the visible consent-banner provider and controls, the CookieRisk score, whether tracking appeared before consent, classifications for tags or services, browser-recorded initiator hosts, and consent-related signals.

Page-level settings and scan-wide network signals are represented separately. A request associated with a tracking category is not, by itself, proof that tracking occurred. Likewise, an unknown, incomplete, or failed scan cannot be interpreted as evidence that the page has no tracking.

Setup and configuration

Use the MCP endpoint at https://cookierisk.eu/mcp with an MCP-compatible client or agent runtime. The developer reference for the interface is available at https://cookierisk.eu/developers/mcp.

The workflow requires a public homepage and the scan ID returned by start_quickscan. Clients should be prepared to poll or request results while a scan is in progress, and should preserve the distinction between fresh scans and reused evidence.

Tools and capabilities

• start_quickscan starts a scan of a public homepage or reuses recent evidence.
• get_quickscan_result retrieves progress or sanitized findings for a CookieRisk scan ID.
• Reports can include the detected banner provider and available consent controls.
• Results may include a CookieRisk score, pre-consent tracking status, tag or service classifications, initiator hosts, and consent signals.
• Scan responses can expose evidence timing and a domain cooldown end when those details are available.

Limitations and notes

The scan covers observations before consent interaction. It does not test what happens after accepting or rejecting consent, issue legal verdicts, inspect private pages, perform bulk scans, or provide continuous monitoring.

Interpret results according to their state and scope. Tracking-category classification alone does not confirm a network request was tracking, and failed, incomplete, or unknown scans do not demonstrate an absence of tracking. Page settings and network-wide signals should be evaluated as separate result areas.