How the scanner behaves

The Agent Surface Scan reads a site the way an AI agent would, and only that: public pages, plain HTTP requests, no authentication, nothing bypassed.

• Identification: requests carry the user agent AgentSurfaceScan/0.1 (+https://scanwebmcp.vercel.app/about-scanner).
• Volume: at most six pages per scan, one scan per domain per 24 hours unless a re-scan is requested, 10-second timeouts.
• Respect: robots.txt honoured for our user agent; private and internal addresses refused; no rate that could resemble an attack.
• Storage: observed public signals with evidence snippets capped at 500 characters. Nothing behind a login is ever requested or stored. Lawful basis: legitimate interest in analysing publicly published business information.
• Corrections: every result page carries the exact evidence for each finding. If something is wrong, use the contact route below — corrections are logged and the page re-issued with a visible timestamp.

Opting out

Request removal here. Opted-out domains are excluded from future scans and any comparison sets; we retain only a tombstone record of the opt-out itself.