HTTP Header Policy Check — HSTS, CSP & Frame Declarations MCP Server

by kriton-dev Your server? Claim it

answering

HTTP Header Policy Check — HSTS, CSP & Frame Declarations is answering right now. Last checked 7 min ago.

Check seven declared HTTP security header families without returning raw values

Uptime history 21 hours of history

21 hours agonow

100.0%

Uptime 24h

75 of 75 checks

—

Tools

hidden behind auth

365 ms

Response time

average over 24h

API key

Access

streamable-http

Nothing serious here today

Today is the operative word: we check HTTP Header Policy Check — HSTS, CSP & Frame Declarations every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 7 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add http-security-headers --transport http 'https://mcp.apify.com/?tools=hermeskd/http-security-headers'

Settings → Connectors → Add custom connector, then paste this address

https://mcp.apify.com/?tools=hermeskd/http-security-headers

~/.codex/config.toml

[mcp_servers.http-security-headers]
url = "https://mcp.apify.com/?tools=hermeskd/http-security-headers"

.cursor/mcp.json

{
  "mcpServers": {
    "http-security-headers": {
      "url": "https://mcp.apify.com/?tools=hermeskd/http-security-headers"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "http-security-headers": {
      "type": "http",
      "url": "https://mcp.apify.com/?tools=hermeskd/http-security-headers"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but you need an API key from its owner to call it.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.apify.com/?tools=hermeskd/http-security-headers	streamable-http	needs key	368 ms	7 min ago

Alternatives to HTTP Header Policy Check — HSTS, CSP & Frame Declarations

same job, measured the same way

CookieGuard

by aiscihub

Audit HTTP cookie security against your local policy. Returns findings without cookie values.

local only

HeaderGuard

by workers-mike-tusa-headerguard

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

1 tools answering

Security Headers

by basitalisandhu

Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.

local only

Go-Live Check

by dontdeployonfriday

Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.

4 tools answering

Secret Hygiene MCP

by mrfentmen

Count secret-like patterns in bounded local files without returning values, keys, paths,...

65 installs/wk local only

Enterno.io Site Diagnostics

by enterno

HTTP, DNS, SSL, WHOIS, ping, security-header, SEO and AI-readiness checks for any website.

49 tools answering

PCBLT — Live Checks

by pcblt

Live DNS, email-auth and redirect checks, HTTP security headers, uptime history, PC hardware prices.

12 tools answering

HTTP Check MCP

by mrfentmen

Check a URL live: status, timing, redirect chains and security headers; private hosts blocked

133 installs/wk local only

HTTP Header Policy Check — HSTS, CSP & Frame Declarations — questions

Answers built from our own checks of this server.

Why is there no tool list for HTTP Header Policy Check — HSTS, CSP & Frame Declarations?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is HTTP Header Policy Check — HSTS, CSP & Frame Declarations working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 75 of 75 checks got a reply (100.0%), average response time 365 ms. The bar chart above shows every period we have measured.

How do I connect HTTP Header Policy Check — HSTS, CSP & Frame Declarations?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own key: it refuses anonymous clients.

Does HTTP Header Policy Check — HSTS, CSP & Frame Declarations need an API key?

Yes. Every time we knock, HTTP Header Policy Check — HSTS, CSP & Frame Declarations answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is HTTP Header Policy Check — HSTS, CSP & Frame Declarations?

It answers our handshake in 365 ms on average, which is faster than 37% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.