WhoCites

Set Up WhoCites Inside an AI Agent

The hosted WhoCites MCP endpoint is https://whocites.com/api/mcp. Agents can use it to create paid checkout, retrieve owned report JSON, pull post-launch visibility fix prompts, and verify public proof.

Run an AI visibility scan

Supported setup shapes

Use the remote MCP server URL in MCP-capable hosts such as Claude custom connectors, Claude Code, Codex, Cursor, and other builder tools that support remote HTTP MCP servers.

Ownership boundary

Public verification and checkout creation do not require an API key. Owned report, fix, and re-scan actions require a customer report session, the paid checkoutSessionId for the same audit when the host can resume, or a WhoCites-issued Bearer key mapped to the report owner.

Visibility-only boundary

WhoCites is not a code review, security scanner, auth audit, secrets scanner, or launch-readiness product. The MCP server is for public AI/search visibility measurement and repair.

Starter prompt

Ask the agent to list WhoCites tools first, then retrieve owned report or public proof, summarize fixes as implementation tasks, and avoid inventing customers, reviews, awards, rankings, citations, or performance claims.