Yandex Webmaster MCP with secretless sign-in

Install

npx skillfoxx add plugins/yandex-webmaster-mcp

/plugin marketplace add boxlab-ltd/yandex-webmaster-mcp
/plugin install yandex-webmaster-mcp@boxlab

{
    "mcpServers": {
        "yandex-webmaster": {
            "command": "npx",
            "args": ["-y", "@boxlab/yandex-webmaster-mcp"]
        }
    }
}

This is third-party code. Review the repository files before installing.

What it does

The server offers a small set of seven well-designed tools instead of a thin wrapper per API endpoint. get_hosts lists sites with their SQI and problems, search_queries shows query analytics with top traffic or a time trend, get_indexing shows crawl and indexing history by response code, get_diagnostics lists detected site problems by severity, list_sitemaps shows sitemaps with URL and error counts, get_external_links gives backlink samples and history, and recrawl_status plus recrawl_submit show the quota and submit a URL for recrawling. Every tool is read-only except the recrawl submission. Sign-in goes through a built-in public OAuth client using PKCE right from the command line: no app registration or client secret needed, and the token is cached locally with 0600 permissions. The server is designed to pair with the same author's yandex-metrica-mcp, so an agent can cross-reference Webmaster search queries with on-site behavior from Metrica in one conversation.

Who it is for. For SEO specialists who want safe, read-only Webmaster access without the hassle of registering an OAuth application.

Example request

List my Webmaster hosts and show the SQI for example.com

Limitations

The project is at an early v0.1 status, and the toolset may change. It needs an interactive npx auth sign-in in the browser during first setup. Besides recrawl submission, every tool only reads data; there are no tools for managing sites or sitemaps in Webmaster.

How to disable. Remove the yandex-webmaster block from your MCP client config and delete ~/.config/yandex-webmaster-mcp/token.json.

Security check

• Read-only by design, apart from submitting a URL for recrawl, which does not change site content

README in short

The README emphasizes the read-only design and secretless sign-in through a built-in public OAuth client with PKCE, the early v0.1 development status, and the link to the same author's companion yandex-metrica-mcp server. It lists seven tools with their report modes, a quick start adding the server to the client config and running npx auth to sign in, and installation as a Claude Code plugin via the BoxLab-Ltd marketplace.

Related