The mcp audit at https://anc.dev/ covers all flavors of mcp, including the recently launched webmcp. Remediation prompts, accessible equally by agents and humans, can help close any gaps. Usually one-shot, unless your site is crazy complicated.