Skip to content

See what's in your Google Tag Manager setup — and what's on your page

Enter your website URL and get a health score, consent check, tracking inventory, and prioritized findings. TagManifest scans your tag manager and your live page in one pass. 93 checks, no account, completely free.

A free Google Tag Manager scanning tool

Most setups are messy. Tags accumulate, consent drifts, nobody's sure what's still needed. Enter a URL and TagManifest shows you what's there — your tags, your consent configuration, your tracking scripts, and what needs attention.

Every finding tells you what it is, what it affects, and what to do about it — organized by effort so you know where to start.

69/100
CNeeds Attention25 findings: 3 warnings, 11 optimizations, 11 notes

Category Scores

80Consent
74Measure
96Quality
88Infra
Ad/conversion tags firing without consent
Sample scan · Ridgeline Commerce

Three steps to understanding your setup

  1. Enter your URL

    Type your website address. TagManifest finds the Google Tag Manager setup and scans your page for consent tools and tracking scripts — all in one step. You can also enter a GTM ID directly or upload a JSON export.

  2. Get your scan results

    93 checks across consent, analytics, advertising, security, and more. See what's configured, what's missing, and what to investigate first.

  3. Export and take action

    Download a report for stakeholders, a CSV for ticket tracking, or an AI-ready folder for Claude or ChatGPT. Everything organized by effort — quick wins first.

Ten areas we check

Each category covers a different part of your Google Tag Manager setup. Here's what we look for — and what the findings look like.

Consent and Compliance

13 rules

CMP detection, Consent Mode v2 configuration, consent initialization timing, ad_storage and ad_user_data coverage across all tags, Digital Markets Act readiness, and GA4 consent type validation. Surfaces whether your consent setup is legally compliant or just cosmetically present.

GA4 Data Quality

16 rules

Event naming conventions, the 40-character name limit, the 25-parameter limit, reserved event names, PII in parameter names, reserved prefix usage, debug mode, measurement ID hardcoding, Enhanced Measurement conflicts, and ecommerce event validation.

Ecommerce Tracking

5 rules

Send Ecommerce Data toggle, required purchase parameters (transaction_id, value, currency), purchase events on page-load triggers, and ecommerce funnel coverage. The category that diagnoses $0 revenue in GA4.

Advertising

9 rules

Conversion Linker presence, conversion tag trigger types, remarketing tag configuration, Google Ads and Floodlight setup, and ad platform consent coverage. Catches the attribution and conversion tracking issues that silently waste ad spend.

Security and PII

6 rules

eval() usage, innerHTML assignment, HTTP resource loading, Base64 encoding patterns, direct document.cookie access, and GA4 parameters with PII-suggesting names. Identifies security and privacy patterns for review.

Performance

4 rules

jQuery dependencies in Custom HTML, document.write() usage, All Pages triggers with URL-specific code, and innerHTML assignments. Estimates how your GTM container affects page load speed based on static analysis of tags, scripts, and execution patterns.

Dead Code

6 rules

Legacy Universal Analytics references — __utmz cookies, _gat._getTrackers(), _gaq.push(), ga('send') calls — plus stale paused tags and potentially dead domain references. Finds the code that's been running against null values since the UA sunset in July 2023.

Organization

8 rules

Folder usage, orphaned triggers and variables, default tag names, and container structure. Measures whether the container is self-documenting — could a competent person who's never seen it get productive in 30 minutes?

Infrastructure

8 rules

Duplicate scripts, Custom HTML tags that could be native templates, tag sequencing issues, and external resource management. Finds the structural inefficiencies that accumulate as containers grow through multiple agency handoffs.

Naming

8 rules

Convention consistency, separator patterns, variable type prefixes, GA4 parameter formatting, and default name detection. Naming is the most visible signal of container maintainability — mixed conventions from multiple agencies are immediately apparent.

Built for the person who just inherited a GTM container

  • You just inherited a container

    The previous person left and didn't document anything. You need to understand what's in here, what patterns exist, and where to focus first. TagManifest gives you that orientation in under a minute.

  • You're a consultant scoping work

    Export the container, scan it, and walk into the kickoff call with a health score, a prioritized issue list, and specific findings you can discuss. Turn a container you've never seen into a proposal-ready assessment.

  • You're using AI to improve GTM

    Export the audit as narrative markdown or an MCP server file and feed it directly to Claude, ChatGPT, or any AI assistant. Structured findings with specific issues, affected tags, and recommendations — instead of raw container JSON.

  • You need to verify consent compliance

    European traffic, GDPR requirements, and you're not sure if your consent setup actually works. TagManifest checks your container for consent configuration and scans your live page for CMP presence — the only free tool that checks both layers. Consent Mode v2, ad_storage, ad_user_data, DMA readiness, and tracking outside GTM.

What we check and what we don't

TagManifest scans configuration, not runtime. We see what's set up in your tag manager and what's on your page — not what actually fires when a visitor loads the page. Some findings are definitive. Others are patterns worth investigating. We tell you which is which. No data is stored between sessions. No account required.

See it in action

Don't want to upload your own container yet? Try a sample audit to see how the dashboard works, what findings look like, and how the scoring and export system operates.

TagManifest audit dashboard showing health score of 40/100, category breakdowns, and 32 findings across errors, optimizations, and notesTagManifest audit dashboard showing health score of 40/100, category breakdowns, and 32 findings across errors, optimizations, and notes

Sample scan of a real anonymized setup — 25 findings across 3 warnings, 11 optimizations, and 11 notes. Scores 69/100 with patterns in consent coverage, ad tag configuration, and event naming.

Common questions

No. Enter your website URL and TagManifest finds your Google Tag Manager setup automatically. For the deepest analysis, you can also upload a JSON export from GTM (Admin → Export Container → choose your workspace → download).

Yes. Completely free with no paid tier, no usage limits, and no account required. Upload your container, get your report, export it — as many times as you want.

No. Nothing is stored between sessions. Scan results exist only in your browser while you’re using the tool.

93 checks across 10 categories: consent, GA4 data quality, advertising, ecommerce, security, performance, dead code, organization, infrastructure, and naming. URL scans also check your live page for consent tools, tracking scripts outside GTM, and consent defaults.

TagManifest produces two views. The functional health score runs from 0 to 100 and reflects configuration quality: data accuracy, consent setup, conversion tracking, and code patterns. The container hygiene profile rates naming consistency, folder organization, variable health, and trigger cleanliness as Clean, Mixed, or Cluttered — it tells you whether someone else could inherit this container and make sense of it. The distinction matters because the paths are different: a health finding means something is worth investigating now, a hygiene finding means it will matter as the container grows or changes hands.

Findings are organized into four effort tiers: quick wins you can fix in minutes, focused remediation for issues that need a session, structural work for architectural changes, and strategic improvements for long-term container health. Each finding includes a severity rating, the affected tags, and a specific recommendation.

Yes. 13 checks dedicated to consent inside the tag manager, plus page-level scanning for consent tools like OneTrust, Cookiebot, and CookieYes. Covers Consent Mode v2, ad_storage, ad_user_data, DMA readiness, and consent initialization. If your consent tool lives on the page (not in GTM), TagManifest detects it.

Yes. 16 rules for GA4: event naming conventions, the 40-character name limit, the 25-parameter limit, reserved event names, PII in parameter names, reserved prefix usage, debug mode, measurement ID hardcoding, Enhanced Measurement conflicts, and ecommerce event validation.

Yes. The ecommerce category checks for the Send Ecommerce Data toggle (the most common cause of $0 revenue), missing required purchase parameters (transaction_id, value, currency), purchase events on page-load triggers, and incomplete funnel coverage.

Six formats: Word document (.docx) for stakeholders, narrative markdown report, detailed report with all evidence, CSV spreadsheet for ticket-by-ticket remediation, machine-readable JSON for automation, and an MCP server file for AI assistant integration. All exports are generated client-side.

Yes. Export the audit as narrative markdown (ideal for pasting into a chat) or as an MCP server file (for direct integration with AI tools that support Model Context Protocol). The structured findings — with rule IDs, severity ratings, affected items, and specific recommendations — give AI assistants concrete data to work from instead of raw container JSON.

Yes. Visit tagmanifest.com/demo to see a sample audit without uploading your own container. The demo shows a scored container with real findings across all categories.

Tag Assistant and GTM Preview Mode are runtime debugging tools — they show you what’s happening on a specific page in real time. TagManifest is static analysis of your container definition plus page-level scanning — it checks 93 rules across every tag, trigger, and variable, and scans your live page for CMP and tracking scripts. They’re complementary: use TagManifest for the container-wide audit and consent verification, Preview Mode for page-level debugging.

ObservePoint and DataTrue are enterprise monitoring platforms that cost $12,000–$18,000 per year and require ongoing access. TagManifest is a free, instant, one-time scan — upload a JSON file, get results in seconds, export and go. No subscription, no integration, no ongoing commitment.