// SCAN REPORT

Semrush

19 tools. 0 can modify or destroy data without limits.

Read-only server. Low risk, but rate limits prevent runaway API costs.

Last updated: 2 Jul 2026

0 can modify or destroy data

19 read-only

19 tools total

Community server · catalogue entry verified 02/07/2026

How to control Semrush ↓

TOOL MAP

What Semrush exposes to your agents

Read (19) Write / Execute (0) Destructive / Financial (0)

Running more than one server? Check your whole stack →

THE RISK

What can go wrong

Even read-only tools carry cost. An agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up bills.

POLICY

How to control Semrush

PolicyLayer is an MCP gateway — it sits between your AI agents and Semrush, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "semrush_api_units_balance": {
    "limits": [
      {
        "counter": "semrush_api_units_balance_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Semrush — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SEMRUSH →

Instant setup, no code required.

FULL CATALOGUE

All 19 Semrush tools

READ 19 tools

Read semrush_api_units_balance Check the remaining API units balance Read semrush_backlinks Get backlinks for a specific domain or URL Read semrush_backlinks_domains Get referring domains for a specific domain or URL Read semrush_batch_keyword_overview Analyze up to 100 keywords at once in a specific database (10 API units per line) Read semrush_broad_match_keywords Get broad matches and alternate search queries for a keyword (20 API units per line) Read semrush_competitors Get competitors for a specific domain in organic search Read semrush_domain_organic_keywords Get organic keywords for a specific domain Read semrush_domain_overview Get domain overview data including organic/paid search traffic, keywords, and rankings Read semrush_domain_paid_keywords Get paid keywords for a specific domain Read semrush_keyword_ads_history Get domains that bid on a keyword in the last 12 months (100 API units per line) Read semrush_keyword_difficulty Get difficulty index for ranking in Google\ Read semrush_keyword_organic_results Get domains ranking in Google\ Read semrush_keyword_overview Get overview data for a specific keyword Read semrush_keyword_overview_single_db Get detailed overview data for a keyword from a specific database (10 API units per line) Read semrush_keyword_paid_results Get domains in Google\ Read semrush_phrase_questions Get question-based keywords related to a term (40 API units per line) Read semrush_related_keywords Get related keywords for a specific keyword Read semrush_traffic_sources Get traffic sources data for a domain (requires .Trends API access) Read semrush_traffic_summary Get traffic summary data for domains (requires .Trends API access)

FAQ

Questions about Semrush

Is the Semrush MCP server safe to use without restrictions? +

The Semrush server is primarily read-only with 19 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Semrush MCP server expose? +

19 tools across 1 categories: Read. 19 are read-only. 0 can modify, create, or delete data.

How do I enforce a policy on Semrush? +

Register the Semrush MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Semrush tool call.

Deterministic rules across all 19 Semrush tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SEMRUSH →

Instant setup, no code required.

19 Semrush tools catalogued and risk-classified — across an index of 43,000+ MCP servers.