squirrelscan for Hermes

1. 1

   Install the squirrelscan CLI (optional)

   Free local audits, handy if you also want Hermes to shell out for quick checks.

   bash

   curl -fsSL https://install.squirrelscan.com | bash

1. 1

   Add the server to your Hermes config

   Hermes reads MCP servers from ~/.hermes/config.yaml under mcp_servers. Set auth to oauth and Hermes runs the browser sign-in flow on first connect.

   yaml

   mcp_servers:
     squirrelscan:
       url: "https://mcp.squirrelscan.com/mcp"
       auth: oauth

   Hosted MCP server guide
2. 2

   Restart Hermes or reload MCP

   Hermes discovers and registers the squirrelscan tools at startup. If it is already running, run /reload-mcp instead of restarting. Then ask it to audit a site in plain language.

   text

   Audit https://example.com with squirrelscan and open issues for anything that fails

3. 3

   Or use an API key for headless runs

   On a server without a browser, skip OAuth and pass a squirrelscan API key as a bearer header instead.

   yaml

   mcp_servers:
     squirrelscan:
       url: "https://mcp.squirrelscan.com/mcp"
       headers:
         Authorization: "Bearer sq_your_api_key"

   API keys and scopes

Frequently asked questions

How do I get Hermes to audit and fix my site's SEO?

Add the squirrelscan MCP server to ~/.hermes/config.yaml, then ask Hermes in plain language, for example: audit https://example.com and fix the top issues. It runs a cloud audit across 260+ rules covering SEO, performance, security, and accessibility, then works the source-mapped fixes back into your code.Fix your site with an AI agent

Can I limit which squirrelscan tools Hermes can use?

Yes. Hermes supports per-server tool filtering with tools.include and tools.exclude under the server entry in config.yaml, so you can expose only the audit and report tools and hide the rest.

Do I need a squirrelscan account, and is it free?

Local audits with the squirrel CLI are free and need no account. The hosted MCP server's cloud audits require sign-in and spend pay-as-you-go credits: 50 credits per audit plus 2 per rendered page. run_audit returns a cost estimate for you to approve before anything is charged.How credits work

Can Hermes audit my site automatically after every change?

Yes. Hermes keeps running and remembers what it learns, so you can have it audit after each deploy, track findings in the per-website issue tracker, and act on fixes without driving each step. When it delegates a build to a coding agent like OpenCode, point it back at squirrelscan to check the live result.

How do I connect squirrelscan on a headless server or in CI?

Skip OAuth and pass a squirrelscan API key as a bearer header: set headers.Authorization to Bearer sq_... on the server entry in config.yaml. That avoids the browser sign-in flow on machines without a browser.