Index live · v1.7.0 · OCT 13 2026

Ahrefs (Remote)

Official
byAhrefs

Ahrefs' official remote MCP server delivers live SEO data — keyword research, competitor analysis, backlink profiles, top-ranking pages, AI Overview / brand sentiment, dashboards, and exports — over a Streamable HTTP endpoint at api.ahrefs.com/mcp/mcp. It requires a paid Ahrefs subscription (Lite tier or higher) and consumes API units from your monthly allowance (shared with the direct API and Ahrefs Connect). Auth is an OAuth consent flow that mints a dedicated MCP-scoped key — note that MCP keys are NOT the same as Ahrefs API v3 keys. Feature the remote endpoint only: the ahrefs/ahrefs-mcp-server GitHub repo is officially archived and Ahrefs recommends against using it.

Streamable HTTPOAuth or token
Official remote, paid (Lite+)

Configuration

Setup for this server is documented upstream. We list only configuration we have verified against the server's own README, and this one isn't verified yet — so the snippet lives there, not here.

Setup instructions

AgenticSkills Audit

Automated framework checks. Deep code review tracked separately. Read the methodology →

1/2
1 of 2 automated checks passed
Audited Aug 7, 2026
Hosted endpoint
TLS-only (HTTPS) endpoint
Mitigates: Plaintext credential interceptionResponded 200 over HTTPS
Evidence
OAuth 2.1 metadata (RFC 9728)
Mitigates: Token mismanagement, audience confusionNo /.well-known/oauth-protected-resource (status 404)
Repo-level checks
SECURITY.md published
Mitigates: Coordinated disclosure pathHosted server — repo-level check not applicable
Commit in last 90 days
Mitigates: Maintainer abandonmentHosted server — no public commit log
≥2 active contributors
Mitigates: Bus-factor of oneHosted server — no public contributor list
CI pipeline configured
Mitigates: Code health regressionHosted server — no public CI
Dependency lockfile committed
Mitigates: Dependency confusionHosted server — repo-level check not applicable
Signed releases (npm provenance)
Mitigates: Supply-chain backdoorHosted server — supply chain via vendor
Software Bill of Materials (SBOM)
Mitigates: Audit trailHosted server — repo-level check not applicable
License declared
Mitigates: Legal ambiguityHosted server — vendor terms of service apply

Deep framework checks (OAuth 2.1 / PKCE implementation, input validation, sandboxing) require human source review and are tracked separately. This scorecard covers programmatically verifiable signals only.

Quick Stats

Trust LevelOfficial
TransportStreamable HTTP
AuthOAuth or token
CategoryAnalytics & Monitoring
Websitedocs.ahrefs.com

Author

A

Ahrefs

Official

Tags

seobacklinkskeywordsrank-trackingremotepaid

Used in 2 workflows

The SEO Content Sprint

Audit → outline → draft → schema → publish → verify indexing, in a single session.

5 skills · 4 MCP

The AI Search Visibility Stack

Engineer content to be cited by ChatGPT, Perplexity, and Google AI Overviews.

4 skills · 4 MCP

Get new MCP servers in your inbox. What we added, what failed the security audit, and why. See a past issue.