MCP makes data reachable. It does not make the result correct.

How MCP can expose SEO data and tools while task scope, evidence, and human approval remain separate.

READ-ONLY FIRST / NO PUBLIC CRAWL FOUNDRY ENDPOINT CLAIM

01

Data access is not autonomy

A server can describe reachable data and tools. The SEO Agent Skill still defines evidence rules and when the agent must stop.

02

Capability before provider

Name the required job first. Then verify whether a server exposes the right schema, authentication, freshness, cost, and evidence fields.

03

Read-only is the first useful milestone

A useful pilot can read one bounded project, return source-linked observations, and fail closed when tenant, scope, or freshness is unclear.

04

Current connection state

The skill works without a connection. This website does not initiate OAuth or live reads; technical connection details belong in the separate MCP reference.