Security Headers Csp Lint runs on your own machine — the client starts it, so there is no endpoint to ping. 101 installs a week from npm. Last commit 2 Nov 2026.
Reads security headers and CSP line by line in your config file and names the lines that silently do
Today is the operative word: we check Security Headers Csp Lint every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add security-headers-csp-lint -- npx -y @readystack/security-headers-csp-lint
{
"mcpServers": {
"security-headers-csp-lint": {
"command": "npx",
"args": [
"-y",
"@readystack/security-headers-csp-lint"
]
}
}
}
[mcp_servers.security-headers-csp-lint]
command = "npx"
args = ["-y", "@readystack/security-headers-csp-lint"]
{
"mcpServers": {
"security-headers-csp-lint": {
"command": "npx",
"args": [
"-y",
"@readystack/security-headers-csp-lint"
]
}
}
}
{
"servers": {
"security-headers-csp-lint": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@readystack/security-headers-csp-lint"
]
}
}
}
Marks the lines in your test suite that current pytest no longer runs — and the config keys it silen
Names every image, font, badge and embed in your docs that sends an EU reader's IP outside the EEA
Reads the open-weight model IDs in your code and names the licence clause that binds you - 22 rules
Grade a site's security headers with fixes and a badge; read logs or code for the defender.
Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.
Names every line in the file you have open that starts a recurring cloud charge, with the published
Names every schedule line in the file you have open that fires at the wrong hour, twice, or never at
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Answers built from our own checks of this server.