BittleBits GEO Assistant

Name: BittleBits GEO Assistant
Author: bittlebitsai

SAFEgrade B · trust 89/100

BittleBits MCP plugin. Connect Claude, Cursor, and any MCP client to BittleBits GEO scores and rewrite suggestions."

aeoai seoai seo toolsclaudecursorgenerative engine optimizationgeomcp

Overview

From the repository's own README, as read at the audited commit.

# BittleBits MCP PluginConnect **Claude**, **Cursor**, and any MCP-compatible AI agent to [BittleBits](https://bittlebits.ai) — bringing your **GEO (Generative Engine Optimization) scores** and **AI-content rewrite suggestions** directly into your agent as tools.This repository is the installable plugin wrapper. The BittleBits MCP server itself is hosted and remote — it speaks **Streamable HTTP** and authenticates with **OAuth 2.0**, so there is no token to configure and nothing to run locally. Point your client at the server and sign in through your browser.## What you getOnce connected, your agent can call BittleBits tools to score and rewrite content without copy-pasting between tabs:| Tool          | What it does                                                                                   || ------------- | ---------------------------------------------------------------------------------------------- || `get_score`   | Returns GEO metric scores (0–10 per dimension) for a page                                       || `get_rewrite` | Returns your original page content and a rewritten version with BittleBits suggestions applied  |Ask things like *"Get the BittleBits score for my landing page and tell me which areas need the most work,"* or *"Rewrite my homepage applying the BittleBits suggestions but keep the casual tone."*## InstallThe server lives at `https://bittlebits.ai/mcp`. On first use, your client opens a browser window to sign in to your BittleBits account (OAuth) — no API keys or tokens to paste.### Claude Code (CLI)```bashclaude mcp add --transport http bittlebits https://bittlebits.ai/mcp```### Claude.ai / Claude Desktop`Settings → Connectors → Add custom connector`, name it **BittleBits**, and set the remote MCP server URL to `https://bittlebits.ai/mcp`.### Cursor / VS CodeAdd to your `mcp.json`:```json{  "mcpServers": {    "bittlebits": {      "type": "http",      "url": "https://bittlebits.ai/mcp"    }  }}```This repo's root [`.mcp.json`](./.mc

Details

Source: bittlebitsai/bittlebits-plugin
Transports: streamable-http
Tools: Registered at runtime; the list could not be read from source.
License: MIT
Stars: 0 · pushed 102d ago

Trust audit

Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	NA
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: none-observed
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (2)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862

streamable-http

Why it matters. a network transport with no auth environment variable found

Fix. require a token

LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104

server.json

Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source

Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha 5acf3d1f6593 · full audit: observations/trust-audit/mcp-server/bittlebitsai__bittlebits.json · Report an issue or request a re-scan

Audit history

Date	Source	Verdict	Grade	Score	Change
2026-09-13	`5acf3d1f6593`	SAFE	B	89	source changed, verdict held

Alternatives

Other servers in the same categories, safer ones first.

Magic
0r/0w/0d · SAFE Atlaso — remote MCP server**Atlaso is an AI memory layer: on
0r/0w/0d · SAFE Figma Context
2r/0w/0d · SAFE AdTest.AI MCP server
0r/1w/0d · SAFE BrowserTools
15r/0w/0d · CAUTION Zotero
1r/1w/1d · CAUTION

Questions

What is the BittleBits GEO Assistant MCP server?

BittleBits MCP plugin. Connect Claude, Cursor, and any MCP client to BittleBits GEO scores and rewrite suggestions."

Is BittleBits GEO Assistant safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does BittleBits GEO Assistant need?

No credential environment variables were found in its source, so it appears to need none.

How does BittleBits GEO Assistant run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (5acf3d1f6593), read on 2026-09-13. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-13 · job trust-audit-2026-09-13