Detectzestack MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 49 installs a week from npm. Last commit 27 Sep 2026.
Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.
Today is the operative word: we check Detectzestack MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add detectzestack-mcp -- npx -y detectzestack-mcp
{
"mcpServers": {
"detectzestack-mcp": {
"args": [
"-y",
"detectzestack-mcp"
],
"command": "npx"
}
}
}
[mcp_servers.detectzestack-mcp]
command = "npx"
args = ["-y", "detectzestack-mcp"]
{
"mcpServers": {
"detectzestack-mcp": {
"args": [
"-y",
"detectzestack-mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"detectzestack-mcp": {
"args": [
"-y",
"detectzestack-mcp"
],
"command": "npx"
}
}
}
This one needs environment variables set before it will start:
DETECTZESTACK_API_KEY (Direct API key from https://detectzestack.com/signup (free: 100 requests/month). Set this OR one of the others.), RAPIDAPI_KEY (RapidAPI key from https://rapidapi.com/mlugoapx/api/detectzestack (alternative).), APIMARKET_KEY (API.market key (alternative).).
The author declared them in the registry entry; get the values from the project itself.
Website intelligence for AI agents: tech stack, hosting, security posture, SEO, and DNS.
Scan websites for security vulnerabilities, headers, TLS, and email security.
MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
Grade a site's security headers with fixes and a badge; read logs or code for the defender.
Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.
Answers built from our own checks of this server.