webmcp-eval

One URL · two ways to authenticate · five hosts

Connect the evaluator

This is a server URL for your MCP client, not a page to open in a browser. Buy a pack and attach it to Claude, ChatGPT, Grok, Cursor, or a CLI. Or claim one free evaluation (not offered when you sign in from ChatGPT; ChatGPT Business can use a pass link).

1 · Wallet

Buy the $26 starter

Checkout mints a usr_live_ key. 13 evals. Every /mcp call needs that key or an OAuth token. With a key, get_credits is not billed and does not open Checkout. A billed evaluate_webmcp is $2: the page answers with a 2xx response and at least one of page rendering or model analysis succeeds. Otherwise the result comes back billed: false and the $2 returns to your balance. Buy again on this page and you get a new key; leftover on the old one is not added. In Claude, Grok, Cursor and the CLI, call reload_credits when the wallet is empty. That Checkout credits the same key, so don't reconnect. In ChatGPT, reload isn't available: buy a pack on this site, then reconnect with the new key. Leftover balance on the old key isn't carried over.

Buy starter

2 · Preferred

Connect with OAuth

Add the server URL. Leave client id and secret blank. On our consent page, paste the key. The host keeps a token; you do not put the key in the URL.

No key yet? Choose Try one free evaluation on the consent page. Not offered when you sign in from ChatGPT.

ChatGPT Business and Cursor (header auth) have no consent page. Email jwilliams@sunbusinessgroup.com for a one-time pass link.

3 · Fallback

Static Bearer header

If OAuth fails or the host only stores a header: Authentication None, header name Authorization, value Bearer usr_live_….

Invariant

Not www. Do not put the key in the URL. Grey-cloud DNS on mcp. We do not keep a first-party history of the URLs you evaluate.

The prompt (any host)

Evaluate https://www.sunbusinessgroup.com/ai/ai-audit.html with evaluate_webmcp.
Return a short human brief: url_purpose, cta, page_intent, capability,
recommended_offers (name, kind, grounding, relation, matched_tool, status, relation_note, evidence (the link or form it cites)),
checked, not_checked, do_not_expose.
relation is keep, rename, fix_description, new, or needs_owner_input. status is ready or needs_owner_input.
Do not dump the raw JSON unless I ask. Do not evaluate a second URL.

Swap the URL for the client page you care about. That SBG audit URL is a live page to try: expect intake. Paste eval JSON into the brief renderer if you want a printable page.

Client setup

  1. Open claude.ai → Customize → Connectors.
  2. Add custom connector → Web. Name: webmcp-eval.
  3. URL: https://mcp.webmcp-eval.com/mcp. Leave OAuth client id/secret blank.
  4. Add, then Connect. Paste usr_live_ on our consent page (it should name Claude).
  5. Enable the connector in Search and tools. Paste the prompt.

Fallback: Authentication None, header Authorization = Bearer usr_live_…. Claude does not add the word Bearer for you.

Custom remote MCP is a paid ChatGPT plan on the web app. Free tier and the native phone apps are not the path.

  1. Turn on Developer mode (Settings → Connectors / Advanced).
  2. Create a developer-mode app. Name: webmcp-eval.
  3. Description: Evaluate one public HTTPS URL for WebMCP readiness. Use evaluate_webmcp.
  4. Server URL as above. Auth: OAuth. Do not invent a client secret.
  5. Complete our consent page with the key. New chat → enable the connector → paste the prompt.

Plus / Individual: OAuth as above. ChatGPT Business Workspace: OAuth often fails. Workspace admin publishes the App with an Access token / API key; each member Connects and pastes usr_live_ as Bearer. No consent page on that path — email jwilliams@sunbusinessgroup.com for a one-time pass link. Use the web app, not desktop, until proven.

OpenAI moves this UI. If Plugins is gone, look under Settings → Connectors → Create. Health should read auth: bearer+oauth.

  1. Grok → Connectors → add a custom MCP.
  2. URL as above. Prefer OAuth. Consent should read Allow Grok to evaluate pages.
  3. Otherwise Authentication None + header Authorization: Bearer usr_live_….
  4. Run the prompt.

If Grok only stores a URL and no header, OAuth must finish or every call 401s.

Same URL. Static header is the boring path. Claude Code can use the OAuth loopback (http://127.0.0.1:*/callback). Header auth has no consent page. Email jwilliams@sunbusinessgroup.com for a one-time pass link.

{
  "mcpServers": {
    "webmcp-eval": {
      "url": "https://mcp.webmcp-eval.com/mcp",
      "headers": {
        "Authorization": "Bearer usr_live_…"
      }
    }
  }
}

If it 401s