Docs · the reference
Everything we know, in plain English.
How to run audits, connect integrations, ship fixes safely, and bill your clients. No marketing-speak, no enterprise jargon, no walls of YAML.
Getting started
Run your first audit
Drop a URL on auditmysite.io. Audit finishes in ~90 seconds.
Read the score
Composite is 0–100. Anything under 70 has at least one high-severity leak.
Approve your first fix
Open the queue, hit Apply on a green-flagged fix. We push it through the connected integration.
Integrations
WordPress
App Passwords (least-privilege). Plugin installs the bridge that applies metadata and schema.
Webflow
OAuth. CMS API for collection items. Designer-level changes routed to a PR-style review.
Shopify
OAuth app. Theme metafields for SEO, Liquid edits via PR.
GitHub
Repo-scoped token. PRs created on a feature branch, never on main.
Vercel
OAuth + deploy hook. Used for cache purge and post-deploy drift checks.
Safety model
Read-only by default
Anonymous audits never touch your site. We only get write access when you explicitly connect an integration.
Per-action approval
Each fix is a separate approval. No blanket consent. Preview shown before any write.
Rollback included
Metadata, schema, and config changes store the previous value. One-click revert.
Scoped tokens
We request the minimum scope per action. Cloudflare for cache only, not DNS — unless the fix is a DNS fix.
Billing & credits
Credits
AI fixes (metadata batches, schema packs, content drafts) consume credits. Each subscription includes monthly credits.
Top-ups
Need more credits mid-month? Buy a top-up pack. Never expires within your active subscription.
Invoices
Stripe Tax handles VAT, GST, and US sales tax automatically. Downloadable PDFs in dashboard.
Refunds
Within 7 days of an automated fix, full refund if the change broke production. Manual review by a human.
API (coming soon)
Authentication
API keys scoped per project. Rotate any time. Audit-only and audit-plus-fix scopes.
Webhooks
POST notifications on audit complete, fix applied, drift detected. Signed with HMAC-SHA256.
Rate limits
60 audits per minute on Pro tier, 200 on Agency. Burst-friendly. We never throttle a paying integration.