CookieGuard MCP Server

by aiscihub Your server? Claim it

local only

CookieGuard runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 7 Nov 2026.

Audit HTTP cookie security against your local policy. Returns findings without cookie values.

—

Installs / week

npm · @aiscihub/cookieguard-mcp

Stars

0 open issues

7 Nov 2026

Last commit

from GitHub

MIT

License

HTML

What the code does

We read the source, 21 h ago · rules 995398eba69f

In the project's build, not in the package

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

Unsafe deserialization backend/classifier.py:306

            d = pickle.load(f)

Runs an external command integrations/python/validation/benchmark.py:256

        'node': subprocess.check_output([os.environ.get('COOKIEGUARD_NODE', 'node'), '--version'], text=True).strip(),

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Nothing serious here today

Today is the operative word: we check CookieGuard every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add cookieguard -- npx -y @aiscihub/cookieguard-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "cookieguard": {
      "command": "npx",
      "args": [
        "-y",
        "@aiscihub/cookieguard-mcp"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.cookieguard]
command = "npx"
args = ["-y", "@aiscihub/cookieguard-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "cookieguard": {
      "command": "npx",
      "args": [
        "-y",
        "@aiscihub/cookieguard-mcp"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "cookieguard": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@aiscihub/cookieguard-mcp"
      ]
    }
  }
}

Alternatives to CookieGuard

same job, measured the same way

HTTP Header Policy Check — HSTS, CSP & Frame Declarations

by kriton-dev

Check seven declared HTTP security header families without returning raw values

answering

Secret Hygiene MCP

by mrfentmen

Count secret-like patterns in bounded local files without returning values, keys, paths,...

65 installs/wk local only

Security Engineer

by guardbee

Fix GuardBee AI Security Engineer findings in your repo with your coding agent, then verify

local only

Architect

by hirosecure

Security reviews for coding agents: diffs checked against your org policy and live infrastructure.

answering

Kodem

by kodemsecurity

Ask about your Kodem Security data and act on findings in plain language, with your permissions.

answering

Cordon for MCP

by marras0914

Cordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals.

63 installs/wk local only

Gateway

by sealgate

MCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.

answering

Bounty Operator

by bountyoperator

Argues against a security finding or a draft bug bounty report before you submit it.

5 tools answering

CookieGuard — questions

Answers built from our own checks of this server.

Why is there no uptime for CookieGuard?

CookieGuard runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @aiscihub/cookieguard-mcp.

How do I connect CookieGuard?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @aiscihub/cookieguard-mcp straight from npm; nothing to host, nothing to sign up for.

Is CookieGuard open source?

Yes — it is published under the MIT licence, written in HTML and 5 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.