Docs · the reference

Everything we know, in plain English.

How to run audits, connect integrations, ship fixes safely, and bill your clients. No marketing-speak, no enterprise jargon, no walls of YAML.

Getting started

Run your first audit

Drop a URL on auditmysite.io. Audit finishes in ~90 seconds.

Read the score

Composite is 0–100. Anything under 70 has at least one high-severity leak.

Approve your first fix

Open the queue, hit Apply on a green-flagged fix. We push it through the connected integration.

Integrations

WordPress

App Passwords (least-privilege). Plugin installs the bridge that applies metadata and schema.

Webflow

OAuth. CMS API for collection items. Designer-level changes routed to a PR-style review.

Shopify

OAuth app. Theme metafields for SEO, Liquid edits via PR.

GitHub

Repo-scoped token. PRs created on a feature branch, never on main.

Vercel

OAuth + deploy hook. Used for cache purge and post-deploy drift checks.

Safety model

Read-only by default

Anonymous audits never touch your site. We only get write access when you explicitly connect an integration.

Per-action approval

Each fix is a separate approval. No blanket consent. Preview shown before any write.

Rollback included

Metadata, schema, and config changes store the previous value. One-click revert.

Scoped tokens

We request the minimum scope per action. Cloudflare for cache only, not DNS — unless the fix is a DNS fix.

Billing & credits

Credits

AI fixes (metadata batches, schema packs, content drafts) consume credits. Each subscription includes monthly credits.

Top-ups

Need more credits mid-month? Buy a top-up pack. Never expires within your active subscription.

Invoices

Stripe Tax handles VAT, GST, and US sales tax automatically. Downloadable PDFs in dashboard.

Refunds

Within 7 days of an automated fix, full refund if the change broke production. Manual review by a human.

API (coming soon)

Authentication

API keys scoped per project. Rotate any time. Audit-only and audit-plus-fix scopes.

Webhooks

POST notifications on audit complete, fix applied, drift detected. Signed with HMAC-SHA256.

Rate limits

60 audits per minute on Pro tier, 200 on Agency. Burst-friendly. We never throttle a paying integration.