mcpbeat Sign in

Security Tools MCP Server

by rangercheck Your server? Claim it
answering

Security Tools is answering right now. Last checked 13 min ago. It exposes 1 tools.

Free front-end security check for any website: a grade plus the secrets and keys it exposes.

Uptime history 46 days of history · worst day 93%
46 days agonow
100.0%
Uptime 24h
91 of 91 checks
1
Tools
read from the server
352 ms
Response time
average over 24h
open, no key
Access
streamable-http

Nothing serious here today

Today is the operative word: we check Security Tools every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 13 min ago.

run in your terminal
claude mcp add security-tools --transport http https://rangercheck.com/api/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "security-tools": {
      "url": "https://rangercheck.com/api/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.security-tools]
url = "https://rangercheck.com/api/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "security-tools": {
      "url": "https://rangercheck.com/api/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "security-tools": {
      "url": "https://rangercheck.com/api/mcp"
    }
  }
}

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

scan
scan_security
Run a free front-end security check on any website and get a letter grade (A to F) plus specific findings. Answers questions like 'is example.com leaking API keys or secrets in its front-end code', 'does this site expose a Stripe/AWS/OpenAI key or a publicly readable database', or 'how is this website's client-side security'. Reads only what the site serves publicly; never logs in or changes anything.

Endpoints

URLTransportStateLatencyChecked
https://rangercheck.com/api/mcp streamable-http answering 315 ms 13 min ago

Alternatives to Security Tools

same job, measured the same way
Clair
by dpdns-clair

Audits AI-built websites for France and Belgium: cookies, GDPR, legal pages, exposed keys, security.

answering
Security MCP
by pratham-jain33

Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses

153 installs/wk local only
SyteCheck
by sytecheck

Scan a website for SEO, accessibility, performance and security issues, and read the report.

256 installs/wk local only
Corrie Site Check
by corrie

Free website check: HTTPS setup and security headers, scored with plain-English fixes. No account.

1 tools answering
Nel Veil
by nelproinc

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

50 installs/wk local only
Mozilla Observatory
by pipeworx-io

MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…

44 tools answering
Jikida
by jikida

Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.

39 installs/wk local only
scorebadge
by scorebadge

Free website score for speed, SEO, security and AI search readiness, with the fixes.

answering

Security Tools — questions

Answers built from our own checks of this server.

What can Security Tools do?
It exposes 1 tools, read directly from the server on our last check. Among them: scan_security. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Security Tools working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 352 ms. The bar chart above shows every period we have measured.
How do I connect Security Tools?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Security Tools need an API key?
No. Security Tools completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Security Tools?
It answers our handshake in 352 ms on average, which is faster than 38% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.