Your rankings, in your tools

Read queries never consume credits. They are bounded only by rate limits and monthly call allowances.

• Latest rankings for projects and keywords with 7d and 30d deltas
• Historical ranking time-series (up to 400 days) with net change calculations
• Monthly Google search volume, estimated CPC, and competition index
• Scan run status, duration, keyword counts, and credits charged
• Account credit balances, active limits, and API usage statistics
• Share link status and public report URLs

Writes support the Idempotency-Key header for safe automatic retries.

• Batch-upsert up to 500 keywords per call with device & location overrides
• Soft-archive keywords without losing historical ranking data
• Trigger manual project scan runs (returns held credits)
• Dry-run check requests to calculate credit costs prior to execution
• Enable, disable, and password-protect public share links
• Register, update, test, and rotate secrets on webhook endpoints

Webhook Events

Subscribe to any combination of events across your account:

• run.completed
  Fires when a scan finishes with settled check counts
• run.failed
  Fires if a scan could not complete due to an upstream fault
• rankings.updated
  Delivers an array of all keywords whose latest rank changed
• alert.triggered
  Fires when any keyword meets an alert rule condition
• credits.low / exhausted
  Notifies your billing team before scans pause

Smart Rank Alert Conditions

Build automated rules that evaluate rankings immediately when scans settle:

• entered_top_n / left_top_n
  Monitor top 3, 10, 20, or 100 benchmark boundaries
• moved_by
  Alert when a keyword gains or drops more than N positions
• not_ranked
  Trigger when a previously ranked keyword leaves the top 100
• ranking_url_changed
  Detect keyword cannibalization or accidental landing page shifts

{
  "mcpServers": {
    "trackserps": {
      "command": "npx",
      "args": ["-y", "@trackserps/mcp"],
      "env": {
        "TRACKSERPS_API_KEY": "ts_live_9b8c2d1e_4a7f920bc8194e32a67e10df38c5b901"
      }
    }
  }
}

Granular Scopes

Enforce principle of least privilege with read and write scopes: rankings:read, keywords:write, runs:write, shares:write, and webhooks:write.

Project Isolation

Restrict keys to specific project IDs. Unauthorized project access returns HTTP 404 rather than 403, preventing resource enumeration.

CIDR IP Allowlist

Pin API keys to your office static IPs, VPN ranges, or cloud production clusters. All other requests are denied instantly.

Signed Webhooks & SSRF Defense

Deliveries carry HMAC-SHA256 signatures with 5-minute replay thresholds. Webhook URLs undergo connect-time IP resolution against SSRF attacks.

Test Mode Keys

Generate ts_test_ keys that target synthetic demo projects. Write requests validate schemas and idempotency without touching live data or credits.

Zero-Downtime Rotation

Rotate production keys with configurable grace periods (1 hour, 24 hours, or 7 days) so deployments never drop requests.