One Server. Three Platforms. Infinite Accounts. Actionable Intelligence.

🎯 Magic Prompts

Copy and paste these into your MCP client (Claude Desktop, etc.) to see the intelligence engine in action:

🔍 The Traffic Detective

"My traffic dropped this week compared to last. Use the anomaly detection and time-series tools to find exactly when the drop started and which pages are responsible."

🎯 The "Striking Distance" Hunter

"Find keywords for https://example.com where I'm ranking in positions 8-15 but have at least 1,000 impressions. These are my best opportunities for a quick traffic boost."

⚔️ The Cannibalization Cleaner

"Check for keyword cannibalization. Are there any queries where two or more of my pages are competing and splitting the traffic? Suggest which one should be the primary authority."

📈 The SEO Opportunity Scoreboard

"Analyze my top 50 keywords for the last 90 days. Rank them by a custom 'Opportunity Score' (Impressions / Position). Give me the top 5 specific pages to focus on."

📊 The Executive Health Check

"Run a full SEO health check for my site. Segment the results by Brand vs. Non-Brand and give me 3 high-impact actions for the upcoming week."

⚡ The Speed vs. Ranking Correlator

"Fetch the top 5 pages by impressions. For these pages, run a PageSpeed audit. Is there any correlation between low performance scores and recently declining positions?"

🔀 Multi-Engine Comparison

"Compare my performance between Google and Bing for the last 30 days. Which keywords are ranking better on Bing but have lower traffic on Google?"

🎯 Bing Opportunity Finder

"Show me keywords where I'm in the top 5 on Google but not ranking on Bing. These are my easy Bing wins."

⚠️ Google Dependency Check

"Am I too dependent on Google? Check my click share across both engines and flag any keywords where over 85% of traffic comes from Google."

💰 The ROI Prioritizer (GSC + GA4)

"Run an opportunity_matrix for my top 20 pages. Which high-visibility pages have the lowest engagement or conversion rates? These are my conversion optimization priorities."

🔐 Authentication (Desktop Flow)

Search Console MCP uses a Secure Desktop Flow. This provides high-security, professional grade authentication for your Google account:

• Multi-Account Support: Connect multiple Google and Bing accounts. The server automatically picks the right one for each site.
• System Keychain Primary: Tokens are stored in your OS's native credential manager (macOS Keychain, Windows Credential Manager, or Linux Secret Service).
• AES-256-GCM Hardware-Bound Encryption: Fallback storage is encrypted with AES-256-GCM using a key derived from your unique hardware machine ID. Tokens stolen from your machine cannot be decrypted on another computer.
• Silent Background Refresh: Tokens auto-refresh silently when they expire.

🚀 Step 1 — Initiate Login

Run the following command to start the authorization process:

npx search-console-mcp setup

The CLI will:

1. Briefly start a secure local server to handle the redirect.
2. Open your default web browser to the Google Authorization page.
3. Automatically fetch your email after authorization to label your credentials securely.

🔑 Step 2 — Logout & Management

To wipe your credentials from both the keychain and the disk:

# Logout of the default account
npx search-console-mcp logout

# Logout of a specific account
npx search-console-mcp logout user@gmail.com

🔑 Alternative: Service Account (Advanced)

For server-side environments or automated tasks where interactive login isn't possible, you can use a Google Cloud Service Account.

Setup:

1. Create Service Account: Go to the Google Cloud Console and create a service account.
2. Generate Key: Click "Keys" > "Add Key" > "Create new key" (JSON). Download this file.
3. Share Access: In Google Search Console, add the service account's email address (e.g., account@project.iam.gserviceaccount.com) as a user with at least "Full" or "Restricted" permissions.
4. Configure: Point the server to your key file:

   export GOOGLE_APPLICATION_CREDENTIALS="/path/to/your/key.json"
   

🔑 Bing Webmaster Tools (API Key)

To access Bing data, you simply need an API Key.

Setup:

1. Get Your API Key: Go to Bing Webmaster Tools Settings.
2. Configure: Set the API key in your environment:

   export BING_API_KEY="your-api-key-here"
   

3. IndexNow: Bing tools also support IndexNow for instant URL submission.

📊 Google Analytics 4 (GA4)

Connect your GA4 properties to correlate ranking data with user behavior.

Setup:

1. Run Setup: npx search-console-mcp setup --engine=ga4
2. Auth Method: Choose Service Account (JSON Key). This is the recommended method for server-side integrations.
   • Service Account: You must add the service account email as a user in GA4 Admin > Property Settings > Property Access Management.
3. Property Selection: The tool will automatically fetch all available GA4 properties for your account and let you select one from a list. You can also enter a Property ID manually if needed.

👥 Multi-Account Management

Manage multiple Google and Bing accounts from the CLI:

# List all connected accounts
npx search-console-mcp accounts list

# Remove an account
npx search-console-mcp accounts remove --account=marketing@company.com

# Add a site boundary to an account
npx search-console-mcp accounts add-site --account=marketing@company.com --site=example.com

When your AI agent queries a site, the server automatically resolves which account to use. Learn more →

🛡️ Fort Knox Security

This MCP server implements a multi-layered security architecture:

• Keychain Integration: Primarily uses the macOS Keychain, Windows Credential Manager, or libsecret (Linux) to store tokens.
• Encrypted Config: Account configuration is stored in ~/.search-console-mcp-config.enc using AES-256-GCM encryption.
• Machine Fingerprinting: The encryption key is derived from your unique hardware UUID and OS user. The encrypted file is useless if moved to another machine.
• Minimalist Storage: Only the refresh_token and expiry_date are stored.
• Legacy Support: Automatically detects credentials from older versions (tokens files, environment variables).
• Strict Unix Permissions: Config files are created with mode 600 (read/write only by your user).

Tools Reference

Google Analytics

| Tool | Description | |------|-------------| | analytics_query | Master tool for raw data. Supports dimensions, filters, aggregationType (byPage/byProperty), dataState (final/all), and type (web/image/news/discover). | | analytics_trends | Detect trends (rising/falling) for specific queries or pages. | | analytics_anomalies | Detect statistical anomalies in daily traffic. | | analytics_drop_attribution | [NEW] Attribute traffic drops to mobile/desktop or correlate with known Google Algorithm Updates. | | analytics_time_series | [NEW] Advanced time series with rolling averages, seasonality detection, and forecasting. | | analytics_compare_periods | Compare two date ranges (e.g., WoW, MoM). | | seo_brand_vs_nonbrand | [NEW] Analyze performance split between Brand vs Non-Brand traffic. (Supports Google & Bing). |

SEO Opportunities (Opinionated)

| Tool | Description | |------|-------------| | seo_low_hanging_fruit | Find keywords ranking in pos 5-20 with high impressions. | | seo_striking_distance | [NEW] Find keywords ranking 8-15 (Quickest ROI wins). | | seo_low_ctr_opportunities | [NEW] Find top ranking queries (pos 1-10) with poor CTR. | | seo_cannibalization | [Enhanced] Detect pages competing for the same query with traffic conflict. | | seo_lost_queries | [NEW] Identify queries that lost all traffic in the last 28 days. (Supports Google & Bing). |

SEO Primitives (Atoms for Age