Quiet Failures MCP Server

by quietfailures Your server? Claim it

answering

Quiet Failures is answering right now. Last checked 14 min ago. It exposes 6 tools.

Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.

Uptime history 78 days of history · worst day 95%

78 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

237 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 20 August 2026. No other catalogue keeps this.

20 Aug a tool changed version

Nothing serious here today

Today is the operative word: we check Quiet Failures every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add quiet-failures --transport http https://mcp.quietfailures.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://mcp.quietfailures.com/mcp

~/.codex/config.toml

[mcp_servers.quiet-failures]
url = "https://mcp.quietfailures.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "quiet-failures": {
      "url": "https://mcp.quietfailures.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "quiet-failures": {
      "type": "http",
      "url": "https://mcp.quietfailures.com/mcp"
    }
  }
}

Available tools 6

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

base

find_base_rate

Search the Quiet Failures base rates by keyword (e.g. "dmarc", "certificate expiry uk", "subdomain takeover"). Returns matching metrics and their most citable segments.

get_base_rate

Full detail for one Quiet Failures base rate segment: the figure with confidence interval, how it is measured, why it matters, the limits of the measurement, the recent time series, and the canonical source URL to cite. Segment defaults to "global"; country slugs (gb, fr, us…) and company cuts (gb-companies, gb-small…) are also published.

list_base_rates

Catalog of all published Quiet Failures base rates: metric id, the global question, the current global figure, sample size, severity, and every published segment slug (valid `segment` values for get_base_rate). Use get_base_rate for full detail on one.

check_email_auth

Live SPF, DKIM and DMARC audit of up to 50 domains the user owns or asks about. Returns a per-domain breakdown plus a portfolio grade. Compare against the base rates: most of the web fails these controls. Rate-limited per client.

subdomain

check_subdomain_takeover

Live scan of one domain: enumerate its subdomains (CT logs + DNS), then test each for dangling references on 13 cloud providers. Slow on large domains (up to a few minutes). Rate-limited per client.

whois

check_whois

Live WHOIS lookup for up to 100 domains: expiry date, registrar, nameservers. Use to catch registrations about to lapse. Rate-limited per client.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.quietfailures.com/mcp	streamable-http	answering	127 ms	14 min ago

Alternatives to Quiet Failures

same job, measured the same way

Arbiter

by arbiterscan

Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.

answering

Nel Veil

by nelproinc

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

89 installs/wk local only

Stackhal

by bahdanhal

Outside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.

13 tools answering

Osv MCP

by mrfentmen

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

87 installs/wk local only

Code Factory

by zrk222

Read-only audit evidence for security, tests, native coverage, runtime failures and repair status.

924 installs/wk local only

Web Scan

by ankitkumarjha515

Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.

3 tools answering

Checker MCP

by oksigenia

Domain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first.

47 installs/wk local only

DomainRef - domain and email security check

by domainref

Pay-per-call domain and email security check: SPF, DKIM, DMARC, TLS, DNSSEC, BIMI, with exact fixes.

2 tools answering

Quiet Failures — questions

Answers built from our own checks of this server.

What can Quiet Failures do?

It exposes 6 tools, read directly from the server on our last check. Among them: check_email_auth, check_subdomain_takeover, check_whois, find_base_rate, get_base_rate, list_base_rates. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Quiet Failures working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 237 ms. The bar chart above shows every period we have measured.

How do I connect Quiet Failures?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Quiet Failures need an API key?

No. Quiet Failures completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 6 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Quiet Failures?

It answers our handshake in 237 ms on average, which is faster than 60% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.