feat(web): full SEO stack — metadata, JSON-LD, sitemap, robots, OG image

Ported and adapted from the BuildMyDiscord SEO setup:

- lib/seo.ts — single source for site constants, the FAQ data (shared by
  the rendered FAQ and the FAQPage schema so they never drift) and JSON-LD
  builders.
- Rich root metadata: title template, keywords, Open Graph, Twitter card,
  robots directives, canonical.
- JSON-LD: Organization + WebSite + SoftwareApplication sitewide, FAQPage
  on the landing page. No AggregateRating — there are no real reviews yet.
- app/robots.ts — allow all, explicit allow-list for AI answer-engine
  crawlers (GPTBot, ClaudeBot, PerplexityBot, …), disallow private routes.
- app/sitemap.ts — every public marketing + docs route.
- app/opengraph-image.tsx — monochrome on-brand 1200x630 share card.
- app/manifest.ts + public/llms.txt.
- Per-page metadata for pricing, changelog, security, privacy, terms,
  docs, templates and status.
- opengraph-image + apple-icon pinned to the edge runtime — next/og
  crashes during a Node-runtime prerender.

Verified: next build passes; /robots.txt, /sitemap.xml,
/manifest.webmanifest and /opengraph-image all generate.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/web/app/(marketing)/changelog/page.tsx

@@ -1,6 +1,12 @@
 import { CodeBlock } from '@/components/code-block';
+import { pageMetadata } from '@/lib/seo';
 
-export const metadata = { title: 'Changelog — BuildMyMCPServer' };
+export const metadata = pageMetadata({
+  title: 'Changelog',
+  description:
+    'Product updates and release notes for BuildMyMCPServer — new features, fixes and improvements to the MCP server platform.',
+  path: '/changelog',
+});
 
 interface Release {
   version: string;

apps/web/app/(marketing)/page.tsx

@@ -1,5 +1,7 @@
-import Link from 'next/link';
 import { CodeBlock } from '@/components/code-block';
+import { JsonLd } from '@/components/json-ld';
+import { FAQ, faqJsonLd } from '@/lib/seo';
+import Link from 'next/link';
 
 const PROMPT_EXAMPLE = `Create an MCP server that searches our Notion workspace.
 Tools: search_pages, get_page_content.
@@ -45,62 +47,37 @@ const MARKETPLACE_POINTS: { t: string; d: string }[] = [
   },
 ];
 
-const FAQ: { q: string; a: string }[] = [
-  {
-    q: 'What is MCP?',
-    a: 'Model Context Protocol — an open standard from Anthropic for connecting AI assistants to external tools, data and APIs over a transport like Streamable HTTP.',
-  },
-  {
-    q: 'Do I need to write code?',
-    a: 'No. You describe the tool in natural language. We generate the TypeScript server, run static checks, build a Docker image and deploy it to a public OAuth-protected URL.',
-  },
-  {
-    q: 'Which clients work?',
-    a: 'Claude Desktop, Cursor, ChatGPT Custom Connectors, VS Code Copilot, Continue.dev — anything that speaks the MCP spec.',
-  },
-  {
-    q: 'How is auth handled?',
-    a: 'Every generated server is an OAuth 2.1 Resource Server. Our control plane is the Authorization Server (PKCE + Dynamic Client Registration + Resource Indicators per RFC 8707).',
-  },
-  {
-    q: 'Can I self-host?',
-    a: 'Yes. The runner is a plain Docker container; the control plane is open to BYO Postgres + Redis. See the self-hosting guide in docs.',
-  },
-  {
-    q: 'What about secrets?',
-    a: 'AES-256-GCM at rest in Postgres, injected as environment variables into the runtime container. Never logged, never echoed back.',
-  },
-  {
-    q: 'Cold starts?',
-    a: 'No cold starts. Containers stay warm. Sub-50ms tool-call overhead on average for in-region requests.',
-  },
-  {
-    q: 'Rate limits?',
-    a: 'Default 100 requests/min/IP per tool. Configurable per server. Quota enforced at the Traefik layer before hitting your container.',
-  },
-  {
-    q: 'How fast is generation?',
-    a: 'Spec → image → live URL typically completes in 45-90 seconds.',
-  },
-  {
-    q: 'Logs and metrics?',
-    a: 'Live log streaming to the dashboard, structured tool-call metrics (P50/P95/P99 latency, error rate, per-tool throughput) — all retained for 30 days.',
-  },
-  {
-    q: 'What if I cancel?',
-    a: 'You can export the full TypeScript source of every server you built. No vendor lock-in.',
-  },
-  {
-    q: 'Custom domain?',
-    a: 'Pro plan and above. Add a CNAME, we provision Let’s Encrypt automatically.',
-  },
-];
-
 const TIERS = [
-  { name: 'Hobby', price: '€0', tag: 'Forever free', features: ['1 server', '100k calls/mo', 'BMM subdomain', 'Community support'] },
-  { name: 'Pro', price: '€49', tag: '/ month', features: ['5 servers', '1M calls/mo', 'Custom domain', 'Priority build queue', 'Email support'] },
-  { name: 'Team', price: '€149', tag: '/ month', features: ['25 servers', '10M calls/mo', 'RBAC + audit log', 'SLA 99.9%', 'Slack support'] },
-  { name: 'Enterprise', price: '€499+', tag: '/ month', features: ['Unlimited', 'BYOC', 'SSO / SAML', 'Dedicated cluster', 'Customer success'] },
+  {
+    name: 'Hobby',
+    price: '€0',
+    tag: 'Forever free',
+    features: ['1 server', '100k calls/mo', 'BMM subdomain', 'Community support'],
+  },
+  {
+    name: 'Pro',
+    price: '€49',
+    tag: '/ month',
+    features: [
+      '5 servers',
+      '1M calls/mo',
+      'Custom domain',
+      'Priority build queue',
+      'Email support',
+    ],
+  },
+  {
+    name: 'Team',
+    price: '€149',
+    tag: '/ month',
+    features: ['25 servers', '10M calls/mo', 'RBAC + audit log', 'SLA 99.9%', 'Slack support'],
+  },
+  {
+    name: 'Enterprise',
+    price: '€499+',
+    tag: '/ month',
+    features: ['Unlimited', 'BYOC', 'SSO / SAML', 'Dedicated cluster', 'Customer success'],
+  },
 ];
 
 export default function Landing() {
@@ -176,12 +153,26 @@ export default function Landing() {
           </div>
           <div className="grid gap-6 md:grid-cols-3">
             {[
-              { n: '01', t: 'Describe your tool', d: 'A sentence is enough. List your secrets and which APIs to call.' },
-              { n: '02', t: 'We generate, check, deploy', d: 'Claude writes the spec. We render TypeScript, run static checks, build a container, deploy to your subdomain.' },
-              { n: '03', t: 'Install in your client', d: 'Copy the snippet into Claude Desktop, Cursor or ChatGPT. OAuth flow on first use.' },
+              {
+                n: '01',
+                t: 'Describe your tool',
+                d: 'A sentence is enough. List your secrets and which APIs to call.',
+              },
+              {
+                n: '02',
+                t: 'We generate, check, deploy',
+                d: 'Claude writes the spec. We render TypeScript, run static checks, build a container, deploy to your subdomain.',
+              },
+              {
+                n: '03',
+                t: 'Install in your client',
+                d: 'Copy the snippet into Claude Desktop, Cursor or ChatGPT. OAuth flow on first use.',
+              },
             ].map((s) => (
               <div key={s.n} className="panel p-5">
-                <div className="mono text-[11px] tracking-widest text-[--color-fg-subtle]">{s.n}</div>
+                <div className="mono text-[11px] tracking-widest text-[--color-fg-subtle]">
+                  {s.n}
+                </div>
                 <h3 className="mt-4 text-[15px] font-semibold tracking-tight">{s.t}</h3>
                 <p className="mt-2 text-[13px] leading-relaxed text-[--color-fg-muted]">{s.d}</p>
               </div>
@@ -211,16 +202,23 @@ export default function Landing() {
       <section className="border-b border-[--color-border] py-20">
         <div className="mx-auto max-w-6xl px-6">
           <div className="mb-10 max-w-2xl">
-            <h2 className="text-[28px] font-semibold tracking-tight">Built for the work you actually have</h2>
+            <h2 className="text-[28px] font-semibold tracking-tight">
+              Built for the work you actually have
+            </h2>
             <p className="mt-2 text-[14px] text-[--color-fg-muted]">
               Anything with an HTTP API or a database, in minutes.
             </p>
           </div>
           <div className="grid gap-3 md:grid-cols-3">
             {EXAMPLES.map((e) => (
-              <div key={e.title} className="panel p-4 transition-colors hover:border-[--color-border-strong]">
+              <div
+                key={e.title}
+                className="panel p-4 transition-colors hover:border-[--color-border-strong]"
+              >
                 <div className="text-[13px] font-semibold tracking-tight">{e.title}</div>
-                <p className="mt-1 text-[12.5px] leading-relaxed text-[--color-fg-muted]">{e.desc}</p>
+                <p className="mt-1 text-[12.5px] leading-relaxed text-[--color-fg-muted]">
+                  {e.desc}
+                </p>
               </div>
             ))}
           </div>
@@ -273,7 +271,9 @@ export default function Landing() {
                 key={t.name}
                 className={`panel p-5 ${i === 1 ? 'border-[--color-accent]/40' : ''}`}
               >
-                <div className="text-[12px] uppercase tracking-wider text-[--color-fg-subtle]">{t.name}</div>
+                <div className="text-[12px] uppercase tracking-wider text-[--color-fg-subtle]">
+                  {t.name}
+                </div>
                 <div className="mt-2 flex items-baseline gap-1">
                   <span className="text-[26px] font-semibold tracking-tight">{t.price}</span>
                   <span className="text-[12px] text-[--color-fg-subtle]">{t.tag}</span>
@@ -291,6 +291,7 @@ export default function Landing() {
 
       {/* FAQ */}
       <section className="py-20">
+        <JsonLd data={faqJsonLd()} />
         <div className="mx-auto max-w-6xl px-6">
           <h2 className="text-[28px] font-semibold tracking-tight">FAQ</h2>
           <div className="mt-8 grid gap-x-12 gap-y-6 md:grid-cols-2">

apps/web/app/(marketing)/pricing/page.tsx

@@ -1,6 +1,12 @@
+import { pageMetadata } from '@/lib/seo';
 import Link from 'next/link';
 
-export const metadata = { title: 'Pricing — BuildMyMCPServer' };
+export const metadata = pageMetadata({
+  title: 'Pricing',
+  description:
+    'BuildMyMCPServer pricing — start free with one hosted MCP server, scale to Pro, Team and Enterprise. Pay for tool calls, not boilerplate.',
+  path: '/pricing',
+});
 
 const TIERS = [
   {
@@ -113,7 +119,9 @@ export default function Pricing() {
               <span className="text-[28px] font-semibold tracking-tight">{t.price}</span>
               <span className="text-[12px] text-[--color-fg-subtle]">{t.tag}</span>
             </div>
-            <p className="mt-2 text-[12px] leading-relaxed text-[--color-fg-muted]">{t.description}</p>
+            <p className="mt-2 text-[12px] leading-relaxed text-[--color-fg-muted]">
+              {t.description}
+            </p>
             <ul className="mt-4 space-y-1.5 text-[12.5px] text-[--color-fg-muted]">
               {t.features.map((f) => (
                 <li key={f}>— {f}</li>

apps/web/app/(marketing)/privacy/page.tsx

@@ -1,4 +1,11 @@
-export const metadata = { title: 'Privacy — BuildMyMCPServer' };
+import { pageMetadata } from '@/lib/seo';
+
+export const metadata = pageMetadata({
+  title: 'Privacy',
+  description:
+    'BuildMyMCPServer privacy policy — what data we collect, how it is used, and the rights you have over it.',
+  path: '/privacy',
+});
 
 const SECTIONS = [
   {
@@ -29,7 +36,7 @@ const SECTIONS = [
   {
     h: 'Subprocessors',
     p: [
-      'Anthropic (generation) — only the prompt text you send. Anthropic\'s data-retention policy applies.',
+      "Anthropic (generation) — only the prompt text you send. Anthropic's data-retention policy applies.",
       'Hetzner (compute).',
       'Backblaze (encrypted backups).',
       'Stripe (billing).',
@@ -91,7 +98,10 @@ export default function Privacy() {
           <h2 className="text-[16px] font-semibold tracking-tight">Contact</h2>
           <p className="mt-3 text-[13.5px] leading-relaxed text-[--color-fg-muted]">
             Data controller: BuildMyMCPServer. Email{' '}
-            <a className="text-[--color-accent] underline" href="mailto:privacy@buildmymcpserver.com">
+            <a
+              className="text-[--color-accent] underline"
+              href="mailto:privacy@buildmymcpserver.com"
+            >
               privacy@buildmymcpserver.com
             </a>{' '}
             for any of the above.

apps/web/app/(marketing)/security/page.tsx

@@ -1,7 +1,13 @@
-import Link from 'next/link';
 import { CodeBlock } from '@/components/code-block';
+import { pageMetadata } from '@/lib/seo';
+import Link from 'next/link';
 
-export const metadata = { title: 'Security — BuildMyMCPServer' };
+export const metadata = pageMetadata({
+  title: 'Security',
+  description:
+    'How BuildMyMCPServer secures your MCP servers — per-server Docker isolation, AES-256-GCM encrypted secrets, OAuth 2.1 and a hardened control plane.',
+  path: '/security',
+});
 
 const PILLARS = [
   {
@@ -18,7 +24,7 @@ const PILLARS = [
   },
   {
     title: 'No token passthrough',
-    body: 'When a tool calls a downstream API, it uses its own server-side credentials — not the user\'s OAuth token. Tokens never leak across trust boundaries. This is mandated by the MCP authorization spec.',
+    body: "When a tool calls a downstream API, it uses its own server-side credentials — not the user's OAuth token. Tokens never leak across trust boundaries. This is mandated by the MCP authorization spec.",
   },
   {
     title: 'Static security checks',
@@ -49,8 +55,8 @@ export default function Security() {
           Built like infrastructure.
         </h1>
         <p className="mt-3 text-[14px] leading-relaxed text-[--color-fg-muted]">
-          We host code generated by an LLM, on behalf of customers, that exposes their internal
-          APIs to AI clients. The threat model is real. Here is what we do about it.
+          We host code generated by an LLM, on behalf of customers, that exposes their internal APIs
+          to AI clients. The threat model is real. Here is what we do about it.
         </p>
       </header>
 
@@ -67,7 +73,10 @@ export default function Security() {
         <h2 className="text-[18px] font-semibold tracking-tight">Disclosure</h2>
         <p className="mt-2 text-[13.5px] leading-relaxed text-[--color-fg-muted]">
           Found a vulnerability? Email{' '}
-          <a className="text-[--color-accent] underline" href="mailto:security@buildmymcpserver.com">
+          <a
+            className="text-[--color-accent] underline"
+            href="mailto:security@buildmymcpserver.com"
+          >
             security@buildmymcpserver.com
           </a>{' '}
           with a clear reproduction. We respond within 48h. We do not run a paid bounty yet, but we

apps/web/app/(marketing)/status/layout.tsx

@@ -0,0 +1,14 @@
+import { pageMetadata } from '@/lib/seo';
+
+// status/page.tsx is a client component and cannot export metadata itself —
+// this layout carries it.
+export const metadata = pageMetadata({
+  title: 'Status',
+  description:
+    'Live operational status of BuildMyMCPServer — control plane, build pipeline and hosted MCP servers.',
+  path: '/status',
+});
+
+export default function StatusLayout({ children }: { children: React.ReactNode }) {
+  return children;
+}

apps/web/app/(marketing)/terms/page.tsx

@@ -1,4 +1,11 @@
-export const metadata = { title: 'Terms — BuildMyMCPServer' };
+import { pageMetadata } from '@/lib/seo';
+
+export const metadata = pageMetadata({
+  title: 'Terms',
+  description:
+    'BuildMyMCPServer terms of service — the agreement that governs use of the platform.',
+  path: '/terms',
+});
 
 const SECTIONS = [
   {