about

Everything behind a website.

Every website is made of choices: the tools it runs on, how heavy it is, the colors, fonts and spacing it uses. Most of that is hidden behind the page.

Paste a URL and stole.si opens the page once in a real browser and shows you what it found: the servers, frameworks and analytics behind it, how fast it answered and everything it downloaded, the security headers and certificate, how it shows up in search and social apps, quick accessibility checks, and the design a visitor actually sees, from color roles and fonts that really loaded to text sizes, spacing, corners, shadows, breakpoints, buttons and links.

The same data is available through a free API and an MCP server, and you can compare two sites side by side.

Read it on the page, share the link, or take it with you as a DESIGN.md written for AI agents, plus tokens.json, CSS variables and a Tailwind config. Drop them into your project and your agent builds with real values.

Why .si

.si stands for Super Intelligence: the reading, clustering and naming happen automatically, so you get a clean, named system instead of a dump of every color on the page.

Learn, don’t clone

stole.si only reads publicly visible style values: colors, sizes, spacing and font names. It never downloads, stores or rehosts anyone’s images, fonts, text or files. Use what you learn to make something of your own, and respect other people’s trademarks and copyrights.

How the scanner behaves

• One page load per scan, plus a look at robots.txt and at the plain-HTTP address to see if it redirects. Every request carries an honest user agent that says StoleSi/1.0 (+https://www.stole.si/about).
• Images and video are not downloaded. Results are cached for 24 hours, so popular sites are not scanned again and again.
• Pages that need a sign-in or block automated visitors are left alone, and so are pages whose robots.txt blocks StoleSi. Rules for all crawlers (User-agent: *) don’t apply: a scan is one visit that a person asked for, like opening the page in a browser.

Tech detection

Technologies are recognized with the open Wappalyzer fingerprint set from January 2023 (MIT License, © 2008 Wappalyzer), about 3,600 technologies, plus stole.si’s own fixes and additions for newer tools. Every detection lists the evidence it was found by. Company domains are told apart with the Public Suffix List (Mozilla Public License 2.0).

What the numbers mean

Speed is measured once from stole.si’s server, without images or video, so it shows how the page is built rather than how fast it is for every visitor. Accessibility results are quick automated checks, not a full audit. Every check shows the value it measured, so you can see exactly why it passed or failed.

Contact

Questions and ideas go to hello@stole.si or through the contact form. Site owners can remove their site in a minute.