# RankRight
> SEO tracking + AI Visibility (AEO) platform for developers and agencies.
> The product and its API live at https://app.rankright.dev — this is the
> marketing site.

Start here (no auth needed):
- https://app.rankright.dev/llms.txt : agent orientation for the API
- https://app.rankright.dev/developers.md : full API guide (auth, conventions,
  workflows, every RPC) as markdown
- https://app.rankright.dev/api/v1/openapi.json : OpenAPI 3.1 spec

What the API does:
- SEO: audits, Google Search Console analysis, prioritized per-page action
  items, plain-English site edits (prompted_edit job → apply_site_edit).
- AI Visibility (AEO): does ChatGPT / Claude / Gemini name and cite a client
  for buyer questions? generate_aeo_questions → set_aeo_cadence →
  get_aeo_summary → get_aeo_items → aeo_report_html (white-label report).

Try it without an account: a public READ-ONLY sandbox key (fictional demo
client, rate-limited) is published in https://app.rankright.dev/llms.txt —
it works for every read RPC and the MCP server at
https://app.rankright.dev/api/v1/mcp.

Connecting as an app or AI assistant: the MCP server and API support OAuth 2.0
(authorization code + PKCE, dynamic client registration, one-hour tokens,
rotating refresh) — add https://app.rankright.dev/api/v1/mcp as a connector
with no key and approve the consent screen. Discovery:
https://app.rankright.dev/.well-known/oauth-authorization-server

Also: signed webhooks instead of polling, one-call export of an organization
(every table as JSON + CSV), Google sign-in plus self-serve enterprise SSO
(any OpenID Connect or SAML 2.0 provider), a Python SDK (pip install
rankright), and a versioning/deprecation policy with a public changelog
(https://app.rankright.dev/changelog.md). Security posture:
https://rankright.dev/security.html

Access: an org owner mints API keys (rrk_...) inside the app; calls are
POST https://app.rankright.dev/api/v1/rpc/<method> with a bearer key.
Pricing and sign-up: https://rankright.dev/#pricing