# Merlonix > Merlonix is a monitoring platform for agencies, MSPs, and teams that watch sites they don't own. It monitors uptime, SSL/TLS certificates, DNS, and upstream-vendor status — and, in the AI era, whether a site is readable by AI agents and how AI answer engines (ChatGPT, Perplexity) describe a brand. Alerts go to email, Slack, webhooks, and SMS; paid tiers add compliance evidence, audit-ready attestations, and white-label status pages. Last updated: 2026-08-25. Every fact below matches the live product and plans catalog on that date. ## Key facts - **What it is:** continuous infrastructure + AI-visibility monitoring for web/digital agencies and MSPs who watch their clients' domains. - **Signature differentiator — vendor-aware alerting:** Merlonix watches 11 major providers' status pages and *holds the on-call page* when the real cause of an incident is an upstream provider (e.g. Stripe, Cloudflare, AWS) the agency cannot fix; the alert still records in the dashboard, attributed to the provider. Where most tools only display vendor status alongside your alerts, Merlonix uses it to decide whether to page you at all. - **What it monitors:** SSL/TLS certificate expiry (alerts at 30 and 7 days before expiry), DNS record drift (each check diffed against a stored baseline, with a triage step that separates benign changes from material ones), uptime (with a re-probe to confirm a real outage before paging), broken links and mixed content, prompt-injection in client pages, upstream-vendor status (11 vendors: Stripe, Cloudflare, Shopify, Vercel, GitHub, Slack, AWS, Azure, Google Cloud, Anthropic, OpenAI), AI answer-presence across Perplexity and ChatGPT, and MCP (Model Context Protocol) server health — a protocol-aware handshake that alerts on downtime, a failed initialize, latency regressions, and tool/schema drift. - **AI answer-presence:** weekly checks of whether a public AI answer engine cites a brand and states its facts correctly. Merlonix reports what the engines say; it does not promise to change what they say. - **Plans (flat monthly, every client included):** Free $0 (3 assets, no credit card) · Starter $19/mo (15 assets, 3 seats, 5-minute checks) · Team $79/mo (60 assets, 10 seats, 1-minute checks) · Agency $199/mo (250 assets, unlimited seats, 1-minute checks) · Compliance $699/mo (500 assets, 13-month evidence retention, auditor seats, per-control dashboards) · Enterprise (contact sales: SSO/SAML, white-label, custom contract). A 14-day full-workspace trial requires no credit card. - **Alert channels (all tiers):** email, Slack, Microsoft Teams, Discord, webhook; SMS on supported plans. REST API and bulk import included on every paid tier. - **Monitoring domains you don't own:** a one-time attestation (DNS TXT record or an HTTP file in `.well-known/`) proves authorization; no ownership or DNS credentials required. - **Compliance:** Merlonix produces audit-ready evidence packs and an append-only TLS/DNS evidence ledger that *supports* SOC 2 / HIPAA / PCI audits. Merlonix does not itself certify compliance. - **How it's built:** Cloudflare Workers + Hono API, Next.js marketing and app, Supabase (forced row-level security), Stripe billing. ## Connect over MCP (no signup, no API key) Merlonix runs a live Model Context Protocol server, so an AI agent can run these checks directly instead of scraping the pages below. - Endpoint: `https://api.merlonix.com/mcp` (MCP Streamable HTTP, JSON-RPC 2.0 over POST; protocol 2025-06-18) - Official MCP registry entry: `com.merlonix/monitoring` - Claude Code: `claude mcp add --transport http merlonix https://api.merlonix.com/mcp` - stdio-only clients: bridge with `npx -y mcp-remote https://api.merlonix.com/mcp` - 8 public tools need no authentication: `check_domain_health`, `check_agent_readiness`, `check_mcp_health`, `check_email_blacklist`, `check_broken_links`, `list_vendor_status`, `get_vendor_status`, `list_plans`. Account tools (read and manage your own assets and alerts) take a Merlonix API key. - [MCP server docs](https://merlonix.com/docs/mcp-server/) ## Free tools (no signup) - [Agent-readiness scan](https://merlonix.com/tools/agent-readiness/): Checks whether a site is reachable by AI agents and answer engines — llms.txt, robots.txt rules for the major AI bots (GPTBot, PerplexityBot, ClaudeBot, Google-Extended, CCBot), schema.org structured data, and MCP endpoint — and grades AI-readiness. - [Domain-health scan](https://merlonix.com/tools/domain-health/): One-shot SSL, DNS, and reachability report for any hostname. - [Answer-presence check](https://merlonix.com/tools/answer-presence/): Checks whether AI answer engines mention a brand for a given question. - [MCP server health check](https://merlonix.com/tools/mcp-health/): Runs a real Model Context Protocol handshake (JSON-RPC initialize + tools/list) against any MCP endpoint and reports whether it is up, its protocol version, handshake latency, and the tools it exposes to agents — a protocol-aware health check, not a URL ping. - [SSL certificate expiry monitor](https://merlonix.com/tools/cert-watch/): Checks any hostname's TLS certificate and reports how many days remain before it expires — built around the shortening (down to 47-day) certificate lifetime that makes manual tracking impractical. - [Security headers checker](https://merlonix.com/tools/security-headers/): Grades a site's HTTP security headers (HSTS, Content-Security-Policy, X-Frame-Options, and more) A–F with the specific fixes for any that are missing or weak. - [Email authentication checker](https://merlonix.com/tools/email-auth/): Validates a domain's SPF, DMARC, MTA-STS, and BIMI records so spoofable or misconfigured email auth is caught before it hurts deliverability. - [Broken link checker](https://merlonix.com/tools/broken-links/): Crawls a page for dead links and mixed (insecure) content. - [PageSpeed & Core Web Vitals checker](https://merlonix.com/tools/page-speed/): Measures any page with Google Lighthouse — the 0–100 performance score plus Core Web Vitals (LCP, CLS, TBT) on mobile or desktop, free and with no signup. - [Blacklist checker](https://merlonix.com/tools/blacklist/): Looks up a domain or IP across DNSBL / email blocklists to see whether it is listed. - [OpenAPI → MCP server converter](https://merlonix.com/tools/api-to-mcp/): Converts an OpenAPI spec into a Model Context Protocol server definition and grades whether the resulting API is safe to hand to an AI agent. - [Website acquisition due-diligence check](https://merlonix.com/tools/acquisition-snapshot/): A one-shot infrastructure snapshot (SSL, DNS, security posture) for vetting a website before you buy it. ## Product - [Pricing](https://merlonix.com/pricing/): Plans — Free ($0, no card), Starter, Team, Agency, and Compliance. Per-tier asset limits, check cadence, seats, and alert channels. - [AI visibility](https://merlonix.com/ai-visibility/): Agent-readiness and AI answer-presence monitoring — the AI-era monitoring category. - [Vendor-aware alerting](https://merlonix.com/vendor-aware-alerting/): Correlates your incidents with upstream-vendor outages. - [Public vendor status](https://merlonix.com/vendors/): Live status of the upstream vendors Merlonix tracks. - [MCP server directory](https://merlonix.com/mcp-directory/): A continuously health-checked index of public remote MCP servers — each entry re-verified with a real JSON-RPC handshake, with its live protocol version and tool inventory. ## Docs - [Documentation](https://merlonix.com/docs/): Guides for monitoring, alert channels, compliance, and integrations. - [API reference](https://merlonix.com/docs/api/): The Merlonix REST API. - [MCP server](https://merlonix.com/docs/mcp-server/): Connect Merlonix to AI agents over the Model Context Protocol. ## Company - [Blog](https://merlonix.com/blog/): Articles on monitoring, AI visibility, and compliance for agencies. - [Blog RSS feed](https://merlonix.com/blog/feed.xml): Machine-readable RSS 2.0 feed of every blog article (title, link, description, publish date) — for feed readers, aggregators, and crawlers. - [Changelog](https://merlonix.com/changelog/): Product updates. - [Privacy policy](https://merlonix.com/legal/privacy/) - [Terms of service](https://merlonix.com/legal/terms/)