@visualsentinel/mcp-server 0.2.1 → 0.2.2

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 All notable changes to `@visualsentinel/mcp-server`. Format follows [Keep a Changelog](https://keepachangelog.com/) and the package uses [Semantic Versioning](https://semver.org/).
 
+## [0.2.2] - 2026-11-06
+
+### Added
+
+* Four MCP prompts: `check_website_health`, `investigate_broken_site`, `pre_launch_checklist`, `triage_open_incidents`.
+* Three read-only MCP resources: `visualsentinel://plans`, `visualsentinel://help`, `visualsentinel://tools`. The server now advertises the `prompts` and `resources` capabilities.
+* LobeHub badge and homepage link in the README (the LobeHub claim route).
+* `mcpName` is now `com.visualsentinel/mcp-server` (the registry namespace is verified through a DNS record on visualsentinel.com).
+
+### Changed
+
+* `package.json` `homepage` is now https://visualsentinel.com/mcp, so npm and its mirrors link to the product page instead of this repository.
+* Account tools called without an API key now explain that API keys are available on the Business and Agency plans and that the five public tools work without one.
+* `SERVER_VERSION` lives in `src/version.ts`; a test keeps it equal to `package.json`.
+
 ## [0.2.1] - 2026-10-16
 
 ### Fixed

package/README.md

@@ -1,9 +1,12 @@
 # Visual Sentinel MCP Server
 
+[![MCP Badge](https://lobehub.com/badge/mcp/visualsentinel-mcp-server)](https://lobehub.com/mcp/visualsentinel-mcp-server)
+
 Model Context Protocol server for [Visual Sentinel](https://visualsentinel.com). Visual Sentinel catches pages that look broken even when the site is up. It monitors six layers: uptime, performance, SSL, DNS, visual regression, and content change.
 
 Connect Claude Desktop, Claude Code, Cursor, Cline, Continue, or any MCP-compatible client so an AI assistant can run DNS, SSL and speed checks on any site with no account. With a Visual Sentinel account and an API key (Business and Agency plans) it can also list and create monitors, fetch incident history, and acknowledge alerts on your behalf.
 
+* **Homepage and docs:** https://visualsentinel.com/mcp
 * **npm:** `@visualsentinel/mcp-server`
 * **OpenAPI spec:** https://github.com/VisualSentinel/openapi
 * **API key (Business and Agency plans):** https://visualsentinel.com/settings/api-keys
@@ -40,6 +43,25 @@ Connect Claude Desktop, Claude Code, Cursor, Cline, Continue, or any MCP-compati
 | `vs_status_pages_list` | `GET /api/status-pages` | List your public status pages |
 | `vs_servers_list` | `GET /api/servers` | List registered origin servers |
 
+## Prompts and resources
+
+Besides the 17 tools, the server offers four ready-made prompts and three read-only resources. None of them need an API key except the last prompt.
+
+| Prompt | What it does |
+|---|---|
+| `check_website_health` | Runs the website, SSL, DNS and speed checks on one site and summarises what needs attention. |
+| `investigate_broken_site` | Works through DNS, certificate, response and speed to find the layer at fault; reads incidents and alerts too when an API key is set. |
+| `pre_launch_checklist` | Pass, Warn or Fail checklist for a new or migrated domain. |
+| `triage_open_incidents` | Ranks open incidents and unacknowledged alerts (needs an API key). |
+
+| Resource | Contents |
+|---|---|
+| `visualsentinel://plans` | Plan limits, and which plans include API keys and the account tools. |
+| `visualsentinel://help` | Setup without an account, adding an API key, links. |
+| `visualsentinel://tools` | Every tool, whether it needs a key, and whether it changes data. |
+
+Without an API key the server still starts and lists everything. The five public tools work; each account tool returns a clear message that it needs an API key (Business and Agency plans) instead of failing.
+
 ## Installation
 
 ### Claude Desktop

package/dist/api-client.js

@@ -31,7 +31,7 @@ var ApiClient = class {
     const auth = options.auth ?? true;
     if (auth && !this.hasApiKey()) {
       throw new VsApiError(
-        "Visual Sentinel API key required. Set VS_API_KEY (https://visualsentinel.com/settings/api-keys).",
+        "This tool needs a Visual Sentinel API key, which is available on the Business and Agency plans. Create one at https://visualsentinel.com/settings/api-keys and set it as VS_API_KEY. The DNS, SSL, speed, website-check and health tools work without a key.",
         401,
         null
       );

package/dist/api-client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/api-client.ts"],"sourcesContent":["/**\n * Tiny HTTP client for the Visual Sentinel public API.\n *\n * Reads the API key from `VS_API_KEY` (or `VISUALSENTINEL_API_KEY`) once at\n * construction time. All requests are routed at `https://visualsentinel.com`\n * unless `VS_API_BASE` overrides it (useful for testing against a local\n * dev instance).\n */\n\nconst DEFAULT_BASE = 'https://visualsentinel.com';\n\nexport interface ApiClientOptions {\n  apiKey?: string | undefined;\n  baseUrl?: string | undefined;\n  userAgent?: string;\n}\n\nexport class VsApiError extends Error {\n  constructor(\n    message: string,\n    public readonly status: number,\n    public readonly body: unknown,\n  ) {\n    super(message);\n    this.name = 'VsApiError';\n  }\n}\n\nexport class ApiClient {\n  private readonly apiKey: string | undefined;\n  private readonly baseUrl: string;\n  private readonly userAgent: string;\n\n  constructor(opts: ApiClientOptions = {}) {\n    this.apiKey =\n      opts.apiKey ??\n      process.env.VS_API_KEY ??\n      process.env.VISUALSENTINEL_API_KEY ??\n      undefined;\n    this.baseUrl = (opts.baseUrl ?? process.env.VS_API_BASE ?? DEFAULT_BASE).replace(\n      /\\/+$/,\n      '',\n    );\n    this.userAgent = opts.userAgent ?? '@visualsentinel/mcp-server';\n  }\n\n  hasApiKey(): boolean {\n    return typeof this.apiKey === 'string' && this.apiKey.length > 0;\n  }\n\n  async request<T = unknown>(\n    method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE',\n    path: string,\n    options: { query?: Record<string, string | number | boolean | undefined>; body?: unknown; auth?: boolean } = {},\n  ): Promise<T> {\n    const auth = options.auth ?? true;\n    if (auth && !this.hasApiKey()) {\n      throw new VsApiError(\n        'Visual Sentinel API key required. Set VS_API_KEY (https://visualsentinel.com/settings/api-keys).',\n        401,\n        null,\n      );\n    }\n\n    const url = new URL(path.startsWith('/') ? path : `/${path}`, this.baseUrl);\n    if (options.query) {\n      for (const [k, v] of Object.entries(options.query)) {\n        if (v !== undefined && v !== null) url.searchParams.set(k, String(v));\n      }\n    }\n\n    const headers: Record<string, string> = {\n      Accept: 'application/json',\n      'User-Agent': this.userAgent,\n    };\n    if (auth && this.apiKey) headers['X-API-Key'] = this.apiKey;\n    if (options.body !== undefined) headers['Content-Type'] = 'application/json';\n\n    const res = await fetch(url, {\n      method,\n      headers,\n      body: options.body !== undefined ? JSON.stringify(options.body) : undefined,\n    });\n\n    const text = await res.text();\n    let parsed: unknown = null;\n    if (text.length > 0) {\n      try {\n        parsed = JSON.parse(text);\n      } catch {\n        parsed = text;\n      }\n    }\n\n    if (!res.ok) {\n      throw new VsApiError(\n        `Visual Sentinel API ${method} ${path} returned ${res.status}`,\n        res.status,\n        parsed,\n      );\n    }\n\n    return parsed as T;\n  }\n}\n"],"mappings":";;;AASA,IAAM,eAAe;AAQd,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YACE,SACgB,QACA,MAChB;AACA,UAAM,OAAO;AAHG;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAAA,EACA;AAKpB;AAEO,IAAM,YAAN,MAAgB;AAAA,EACJ;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,OAAyB,CAAC,GAAG;AACvC,SAAK,SACH,KAAK,UACL,QAAQ,IAAI,cACZ,QAAQ,IAAI,0BACZ;AACF,SAAK,WAAW,KAAK,WAAW,QAAQ,IAAI,eAAe,cAAc;AAAA,MACvE;AAAA,MACA;AAAA,IACF;AACA,SAAK,YAAY,KAAK,aAAa;AAAA,EACrC;AAAA,EAEA,YAAqB;AACnB,WAAO,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,SAAS;AAAA,EACjE;AAAA,EAEA,MAAM,QACJ,QACA,MACA,UAA6G,CAAC,GAClG;AACZ,UAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAI,QAAQ,CAAC,KAAK,UAAU,GAAG;AAC7B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,IAAI,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,IAAI,KAAK,OAAO;AAC1E,QAAI,QAAQ,OAAO;AACjB,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,KAAK,GAAG;AAClD,YAAI,MAAM,UAAa,MAAM,KAAM,KAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,MACtE;AAAA,IACF;AAEA,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,cAAc,KAAK;AAAA,IACrB;AACA,QAAI,QAAQ,KAAK,OAAQ,SAAQ,WAAW,IAAI,KAAK;AACrD,QAAI,QAAQ,SAAS,OAAW,SAAQ,cAAc,IAAI;AAE1D,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,MAAM,QAAQ,SAAS,SAAY,KAAK,UAAU,QAAQ,IAAI,IAAI;AAAA,IACpE,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI,SAAkB;AACtB,QAAI,KAAK,SAAS,GAAG;AACnB,UAAI;AACF,iBAAS,KAAK,MAAM,IAAI;AAAA,MAC1B,QAAQ;AACN,iBAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI;AAAA,QACR,uBAAuB,MAAM,IAAI,IAAI,aAAa,IAAI,MAAM;AAAA,QAC5D,IAAI;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../src/api-client.ts"],"sourcesContent":["/**\n * Tiny HTTP client for the Visual Sentinel public API.\n *\n * Reads the API key from `VS_API_KEY` (or `VISUALSENTINEL_API_KEY`) once at\n * construction time. All requests are routed at `https://visualsentinel.com`\n * unless `VS_API_BASE` overrides it (useful for testing against a local\n * dev instance).\n */\n\nconst DEFAULT_BASE = 'https://visualsentinel.com';\n\nexport interface ApiClientOptions {\n  apiKey?: string | undefined;\n  baseUrl?: string | undefined;\n  userAgent?: string;\n}\n\nexport class VsApiError extends Error {\n  constructor(\n    message: string,\n    public readonly status: number,\n    public readonly body: unknown,\n  ) {\n    super(message);\n    this.name = 'VsApiError';\n  }\n}\n\nexport class ApiClient {\n  private readonly apiKey: string | undefined;\n  private readonly baseUrl: string;\n  private readonly userAgent: string;\n\n  constructor(opts: ApiClientOptions = {}) {\n    this.apiKey =\n      opts.apiKey ??\n      process.env.VS_API_KEY ??\n      process.env.VISUALSENTINEL_API_KEY ??\n      undefined;\n    this.baseUrl = (opts.baseUrl ?? process.env.VS_API_BASE ?? DEFAULT_BASE).replace(\n      /\\/+$/,\n      '',\n    );\n    this.userAgent = opts.userAgent ?? '@visualsentinel/mcp-server';\n  }\n\n  hasApiKey(): boolean {\n    return typeof this.apiKey === 'string' && this.apiKey.length > 0;\n  }\n\n  async request<T = unknown>(\n    method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE',\n    path: string,\n    options: { query?: Record<string, string | number | boolean | undefined>; body?: unknown; auth?: boolean } = {},\n  ): Promise<T> {\n    const auth = options.auth ?? true;\n    if (auth && !this.hasApiKey()) {\n      throw new VsApiError(\n        'This tool needs a Visual Sentinel API key, which is available on the Business and Agency plans. Create one at https://visualsentinel.com/settings/api-keys and set it as VS_API_KEY. The DNS, SSL, speed, website-check and health tools work without a key.',\n        401,\n        null,\n      );\n    }\n\n    const url = new URL(path.startsWith('/') ? path : `/${path}`, this.baseUrl);\n    if (options.query) {\n      for (const [k, v] of Object.entries(options.query)) {\n        if (v !== undefined && v !== null) url.searchParams.set(k, String(v));\n      }\n    }\n\n    const headers: Record<string, string> = {\n      Accept: 'application/json',\n      'User-Agent': this.userAgent,\n    };\n    if (auth && this.apiKey) headers['X-API-Key'] = this.apiKey;\n    if (options.body !== undefined) headers['Content-Type'] = 'application/json';\n\n    const res = await fetch(url, {\n      method,\n      headers,\n      body: options.body !== undefined ? JSON.stringify(options.body) : undefined,\n    });\n\n    const text = await res.text();\n    let parsed: unknown = null;\n    if (text.length > 0) {\n      try {\n        parsed = JSON.parse(text);\n      } catch {\n        parsed = text;\n      }\n    }\n\n    if (!res.ok) {\n      throw new VsApiError(\n        `Visual Sentinel API ${method} ${path} returned ${res.status}`,\n        res.status,\n        parsed,\n      );\n    }\n\n    return parsed as T;\n  }\n}\n"],"mappings":";;;AASA,IAAM,eAAe;AAQd,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC,YACE,SACgB,QACA,MAChB;AACA,UAAM,OAAO;AAHG;AACA;AAGhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAAA,EACA;AAKpB;AAEO,IAAM,YAAN,MAAgB;AAAA,EACJ;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,OAAyB,CAAC,GAAG;AACvC,SAAK,SACH,KAAK,UACL,QAAQ,IAAI,cACZ,QAAQ,IAAI,0BACZ;AACF,SAAK,WAAW,KAAK,WAAW,QAAQ,IAAI,eAAe,cAAc;AAAA,MACvE;AAAA,MACA;AAAA,IACF;AACA,SAAK,YAAY,KAAK,aAAa;AAAA,EACrC;AAAA,EAEA,YAAqB;AACnB,WAAO,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,SAAS;AAAA,EACjE;AAAA,EAEA,MAAM,QACJ,QACA,MACA,UAA6G,CAAC,GAClG;AACZ,UAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAI,QAAQ,CAAC,KAAK,UAAU,GAAG;AAC7B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,IAAI,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,IAAI,KAAK,OAAO;AAC1E,QAAI,QAAQ,OAAO;AACjB,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,KAAK,GAAG;AAClD,YAAI,MAAM,UAAa,MAAM,KAAM,KAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;AAAA,MACtE;AAAA,IACF;AAEA,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,cAAc,KAAK;AAAA,IACrB;AACA,QAAI,QAAQ,KAAK,OAAQ,SAAQ,WAAW,IAAI,KAAK;AACrD,QAAI,QAAQ,SAAS,OAAW,SAAQ,cAAc,IAAI;AAE1D,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,MAAM,QAAQ,SAAS,SAAY,KAAK,UAAU,QAAQ,IAAI,IAAI;AAAA,IACpE,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI,SAAkB;AACtB,QAAI,KAAK,SAAS,GAAG;AACnB,UAAI;AACF,iBAAS,KAAK,MAAM,IAAI;AAAA,MAC1B,QAAQ;AACN,iBAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI;AAAA,QACR,uBAAuB,MAAM,IAAI,IAAI,aAAa,IAAI,MAAM;AAAA,QAC5D,IAAI;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/index.js

@@ -5,7 +5,13 @@ import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import {
   CallToolRequestSchema,
-  ListToolsRequestSchema
+  GetPromptRequestSchema,
+  ListPromptsRequestSchema,
+  ListResourcesRequestSchema,
+  ListToolsRequestSchema,
+  McpError,
+  ErrorCode,
+  ReadResourceRequestSchema
 } from "@modelcontextprotocol/sdk/types.js";
 
 // src/api-client.ts
@@ -39,7 +45,7 @@ var ApiClient = class {
     const auth = options.auth ?? true;
     if (auth && !this.hasApiKey()) {
       throw new VsApiError(
-        "Visual Sentinel API key required. Set VS_API_KEY (https://visualsentinel.com/settings/api-keys).",
+        "This tool needs a Visual Sentinel API key, which is available on the Business and Agency plans. Create one at https://visualsentinel.com/settings/api-keys and set it as VS_API_KEY. The DNS, SSL, speed, website-check and health tools work without a key.",
         401,
         null
       );
@@ -189,7 +195,7 @@ var TOOLS = [
       idempotentHint: true,
       openWorldHint: true
     },
-    description: "Run a one-shot performance check against a URL: TTFB, total load time, transfer size, status code, and redirect chain. No authentication required.",
+    description: "Run a one-shot Lighthouse lab test on a URL. Returns the performance score (0 to 100) plus Largest Contentful Paint, First Contentful Paint, Cumulative Layout Shift, Time to First Byte, Total Blocking Time and Speed Index (times in milliseconds). No account needed.",
     inputSchema: {
       type: "object",
       properties: {
@@ -558,7 +564,7 @@ var TOOLS = [
       idempotentHint: true,
       openWorldHint: false
     },
-    description: "Acknowledge an alert by id. Acknowledgement is recorded with the calling API key's user.",
+    description: "Acknowledge an alert by id. The acknowledgement is recorded against the account that authorised this connection.",
     inputSchema: {
       type: "object",
       properties: {
@@ -621,9 +627,192 @@ function findTool(name) {
   return TOOLS.find((t) => t.name === name);
 }
 
+// src/prompts.ts
+function need(args, key) {
+  const v = args[key]?.trim();
+  if (!v) throw new Error(`Argument "${key}" is required.`);
+  return v;
+}
+function hostOf(value) {
+  return value.replace(/^https?:\/\//i, "").replace(/\/.*$/, "");
+}
+var PROMPTS = [
+  {
+    name: "check_website_health",
+    title: "Check a website's health",
+    description: "Run uptime, SSL, DNS and speed checks on one site and summarise what needs attention. No account or API key needed.",
+    arguments: [
+      { name: "url", description: "Site to check, e.g. https://example.com", required: true }
+    ],
+    build: (args) => {
+      const url = need(args, "url");
+      const host = hostOf(url);
+      return [
+        `Check the health of ${url} with the Visual Sentinel tools and report back in plain language.`,
+        "",
+        `1. vs_website_check with url "${url}": HTTP status, response time, server header.`,
+        `2. vs_ssl_check with domain "${host}": certificate validity, expiry date and chain.`,
+        `3. vs_dns_check with domain "${host}": A, AAAA, MX, NS and TXT records.`,
+        `4. vs_speed_test with url "${url}": time to first byte, total load time, transfer size, redirects.`,
+        "",
+        "Then give: a one-line verdict, a short list of anything that looks wrong (non-200 status, certificate close to expiry, missing or odd DNS records, slow response, long redirect chain), and the one fix to do first. Say which checks succeeded and which returned an error. Do not guess at anything a tool did not return."
+      ].join("\n");
+    }
+  },
+  {
+    name: "investigate_broken_site",
+    title: "Investigate why my site looks broken",
+    description: "Work out why a site is down, slow or looking wrong by checking each layer in order. With an API key it also reads open incidents and recent alerts.",
+    arguments: [
+      { name: "url", description: "The affected page, e.g. https://example.com/pricing", required: true },
+      { name: "symptom", description: 'What you see, e.g. "blank page", "images missing", "very slow"', required: false }
+    ],
+    build: (args) => {
+      const url = need(args, "url");
+      const host = hostOf(url);
+      const symptom = args.symptom?.trim();
+      return [
+        `${symptom ? `The page ${url} shows this problem: ${symptom}.` : `Something looks wrong on ${url}.`} Find the most likely layer at fault, using the Visual Sentinel tools in this order and stopping to report as soon as you find a clear cause:`,
+        "",
+        `1. DNS: vs_dns_check for "${host}". Do the records resolve, and do they point where they should?`,
+        `2. TLS: vs_ssl_check for "${host}". Is the certificate valid, unexpired and issued for this hostname?`,
+        `3. Server response: vs_website_check for "${url}". Status code, response time, content snippet.`,
+        `4. Speed: vs_speed_test for "${url}". Is time to first byte or load time unusually high, and is there a redirect chain?`,
+        "5. If a Visual Sentinel API key is configured: vs_monitors_list to find a monitor for this site, then vs_incidents_list and vs_alerts_list for it, and vs_monitors_uptime for the last 24 hours. If no key is set, say that account data was not checked.",
+        "",
+        "A page can return HTTP 200 and still look broken (missing styles, empty content, a failed script). If every check above is healthy, say so and suggest comparing the page against an earlier screenshot, which is what Visual Sentinel visual monitoring does.",
+        "Report: the evidence from each step, the most likely cause, and the next action."
+      ].join("\n");
+    }
+  },
+  {
+    name: "pre_launch_checklist",
+    title: "Pre-launch checklist for a site",
+    description: "Check a new or migrated site before it goes live: DNS, certificate, response and speed, then a short list of fixes. No API key needed.",
+    arguments: [
+      { name: "domain", description: "The domain being launched, e.g. example.com", required: true }
+    ],
+    build: (args) => {
+      const domain = hostOf(need(args, "domain"));
+      return [
+        `Run a pre-launch check on ${domain} with the Visual Sentinel tools and return a checklist with Pass, Warn or Fail for each line.`,
+        "",
+        `- DNS: vs_dns_check for "${domain}" and for "www.${domain}". Both resolve, and the records point to the intended host. Check MX and TXT (SPF) records if the domain sends email.`,
+        `- Certificate: vs_ssl_check for "${domain}" and for "www.${domain}". Valid, issued for the hostname, and more than 30 days from expiry.`,
+        `- Response: vs_website_check for "https://${domain}" and "https://www.${domain}". Both return 200 or one cleanly redirects to the other.`,
+        `- Speed: vs_speed_test for "https://${domain}". Report time to first byte, total load time and redirect count.`,
+        "",
+        "Finish with the Fail items first, each with a concrete fix, then the Warn items. Add one line suggesting monitors to create after launch (uptime on the home page, certificate expiry, DNS records), and say that creating them needs a Visual Sentinel account with an API key. Do not create anything unless asked."
+      ].join("\n");
+    }
+  },
+  {
+    name: "triage_open_incidents",
+    title: "Triage open incidents",
+    description: "Review open incidents and unacknowledged alerts on your account and rank what to look at first. Needs a Visual Sentinel API key (Business and Agency plans).",
+    arguments: [],
+    build: () => [
+      "Review my Visual Sentinel account and tell me what needs attention first.",
+      "",
+      "1. vs_incidents_list with status OPEN, then vs_incidents_get for each one (up to 5, most recent first).",
+      "2. vs_alerts_list with status UNACKNOWLEDGED.",
+      "3. For each affected monitor, vs_monitors_get and vs_monitors_uptime for the last 24 hours.",
+      "",
+      'Rank the incidents by customer impact (production sites and checkout pages before staging), group alerts that belong to the same incident, and give one suggested next step for each. If the tools return an "API key required" error, tell me that account tools need an API key from the Business or Agency plan, and stop. Ask before acknowledging any alert.'
+    ].join("\n")
+  }
+];
+function findPrompt(name) {
+  return PROMPTS.find((p) => p.name === name);
+}
+
+// src/version.ts
+var SERVER_VERSION = "0.2.2";
+
+// src/resources.ts
+var PLANS_AS_OF = "2026-10-16";
+var PLANS = `# Visual Sentinel plans and limits (as of ${PLANS_AS_OF})
+
+Prices and the current list are always at https://visualsentinel.com/pricing. There is no free plan for new accounts: a new workspace gets a first check of its site, then a 7-day trial (card required) or a paid plan.
+
+| Plan | Monitors | Fastest uptime check | Visual pages | Status pages | API keys and MCP account tools |
+|---|---|---|---|---|---|
+| Solo | 10 | every 5 minutes | 1 site, every 30 minutes | 1 | no |
+| Starter | 15 | every 5 minutes | 5, every 15 minutes | 1 | no |
+| Business | 60 | every 1 minute | 60, every 15 minutes | 5 | yes |
+| Agency | 300 | every 1 minute | 300, every 15 minutes | 50 | yes |
+
+- The five public tools (vs_health, vs_dns_check, vs_ssl_check, vs_speed_test, vs_website_check) need no account.
+- The twelve account tools need an API key, which is available on the Business and Agency plans. Create one at https://visualsentinel.com/settings/api-keys.
+- Checks run from Europe and the US. Alert channels on every plan: email, Slack, Discord, Microsoft Teams, Telegram, PagerDuty, Opsgenie, webhooks, WhatsApp, Prometheus, and push notifications in the mobile app.
+`;
+var HELP = `# Using the Visual Sentinel MCP server
+
+Visual Sentinel catches pages that look broken even when the site is up. It watches uptime, performance, SSL certificates, DNS, visual changes and content changes.
+
+## Start without an account
+Ask for a DNS lookup, an SSL certificate check, a speed test or a website check on any public site. These five tools need no account or key.
+
+## Connect your account
+1. Get an API key (Business and Agency plans): https://visualsentinel.com/settings/api-keys
+2. Set it as VS_API_KEY (or VISUALSENTINEL_API_KEY) in your MCP client's environment for this server.
+3. Restart the client. Monitor, uptime, incident, alert, status-page and server tools now work.
+
+## Ready-made prompts
+check_website_health, investigate_broken_site, pre_launch_checklist and triage_open_incidents.
+
+## Links
+- Docs and install: https://visualsentinel.com/mcp
+- API reference: https://visualsentinel.com/docs
+- Pricing: https://visualsentinel.com/pricing
+- Source: https://github.com/VisualSentinel/mcp-server
+- Support: https://visualsentinel.com/contact
+`;
+function toolsReference() {
+  const rows = TOOLS.map(
+    (t) => `| ${t.name} | ${t.requiresAuth ? "API key (Business and Agency)" : "none"} | ${t.annotations.readOnlyHint ? "read-only" : "changes data"} | ${(t.description.split(". ")[0] ?? "").replace(/\.$/, "")} |`
+  );
+  return [
+    "# Visual Sentinel tools",
+    "",
+    "| Tool | Needs | Type | What it does |",
+    "|---|---|---|---|",
+    ...rows,
+    ""
+  ].join("\n");
+}
+var RESOURCES = [
+  {
+    uri: "visualsentinel://plans",
+    name: "plans",
+    title: "Plans and limits",
+    description: "Monitor counts, check frequencies and which plans include API keys and the MCP account tools.",
+    mimeType: "text/markdown",
+    read: () => PLANS
+  },
+  {
+    uri: "visualsentinel://help",
+    name: "help",
+    title: "Help and setup",
+    description: "How to use the server without an account, how to add an API key, and where the docs are.",
+    mimeType: "text/markdown",
+    read: () => HELP
+  },
+  {
+    uri: "visualsentinel://tools",
+    name: "tools",
+    title: "Tool reference",
+    description: "Every tool, whether it needs an API key, and whether it is read-only.",
+    mimeType: "text/markdown",
+    read: toolsReference
+  }
+];
+function findResource(uri) {
+  return RESOURCES.find((r) => r.uri === uri);
+}
+
 // src/index.ts
 var SERVER_NAME = "visualsentinel";
-var SERVER_VERSION = "0.2.1";
 function toMcpToolDescriptor(tool) {
   return {
     name: tool.name,
@@ -637,11 +826,47 @@ async function main() {
   const client = new ApiClient();
   const server = new Server(
     { name: SERVER_NAME, version: SERVER_VERSION },
-    { capabilities: { tools: {} } }
+    { capabilities: { tools: {}, prompts: {}, resources: {} } }
   );
   server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: TOOLS.map(toMcpToolDescriptor)
   }));
+  server.setRequestHandler(ListPromptsRequestSchema, async () => ({
+    prompts: PROMPTS.map((p) => ({
+      name: p.name,
+      title: p.title,
+      description: p.description,
+      arguments: p.arguments
+    }))
+  }));
+  server.setRequestHandler(GetPromptRequestSchema, async (req) => {
+    const prompt = findPrompt(req.params.name);
+    if (!prompt) throw new McpError(ErrorCode.InvalidParams, `Unknown prompt: ${req.params.name}`);
+    let text;
+    try {
+      text = prompt.build(req.params.arguments ?? {});
+    } catch (err) {
+      throw new McpError(ErrorCode.InvalidParams, err instanceof Error ? err.message : String(err));
+    }
+    return {
+      description: prompt.description,
+      messages: [{ role: "user", content: { type: "text", text } }]
+    };
+  });
+  server.setRequestHandler(ListResourcesRequestSchema, async () => ({
+    resources: RESOURCES.map((r) => ({
+      uri: r.uri,
+      name: r.name,
+      title: r.title,
+      description: r.description,
+      mimeType: r.mimeType
+    }))
+  }));
+  server.setRequestHandler(ReadResourceRequestSchema, async (req) => {
+    const resource = findResource(req.params.uri);
+    if (!resource) throw new McpError(ErrorCode.InvalidParams, `Unknown resource: ${req.params.uri}`);
+    return { contents: [{ uri: resource.uri, mimeType: resource.mimeType, text: resource.read() }] };
+  });
   server.setRequestHandler(CallToolRequestSchema, async (req) => {
     const tool = findTool(req.params.name);
     if (!tool) {