RankParse SEO API

PassAudited by ClawScan on May 15, 2026.

Overview

The skill is a coherent RankParse SEO API connector with no local code, but it uses a RankParse API key, a remote MCP server, and paid credits.

This skill appears purpose-aligned for SEO research. Before installing, verify that you trust RankParse, use a dedicated API key if available, monitor paid credit usage, and avoid sending sensitive private URLs unless you are comfortable sharing them with the provider.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

The API key may allow API usage and credit consumption on the user’s RankParse account.

Why it was flagged

The skill requires a RankParse API key and sends it as an MCP header. This is expected for the stated provider integration, but users should treat it as account authority.

Skill content

RANKPARSE_API_KEY=rp_your_key_here ... "X-API-Key": "${RANKPARSE_API_KEY}"

Recommendation

Use a dedicated or limited RankParse key if possible, monitor credit usage, and rotate the key if it is exposed.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

RankParse will receive the domains or URLs being queried, along with the API key needed to authorize the calls.

Why it was flagged

The skill connects the agent to a remote MCP server and includes the API key in the request headers. This is disclosed and purpose-aligned, but it means requests leave the local agent.

Skill content

"url": "https://mcp.rankparse.com/mcp", "headers": { "X-API-Key": "${RANKPARSE_API_KEY}" }

Recommendation

Install only if you trust RankParse with the domains or URLs you query, and avoid sending sensitive private URLs unless that is acceptable.

Low

#ASI02: Tool Misuse and Exploitation

What this means

Large SEO audits or competitor workflows could consume more credits than expected.

Why it was flagged

The tool list and workflows disclose credit costs, including higher-cost calls. This is normal for a paid API, but repeated or broad agent calls could spend credits.

Skill content

Credits from $0.009/call ... `get_site_explorer` | Full domain overview | 10

Recommendation

Ask the agent to estimate or confirm the number of calls before broad audits, and monitor the RankParse credit balance.