HeaderGuard is answering right now. Last checked 13 min ago. It exposes 1 tools.
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
Today is the operative word: we check HeaderGuard every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 13 min ago.
claude mcp add headerguard --transport http https://headerguard.mike-tusa.workers.dev/mcp
{
"mcpServers": {
"headerguard": {
"url": "https://headerguard.mike-tusa.workers.dev/mcp"
}
}
}
[mcp_servers.headerguard]
url = "https://headerguard.mike-tusa.workers.dev/mcp"
{
"mcpServers": {
"headerguard": {
"url": "https://headerguard.mike-tusa.workers.dev/mcp"
}
}
}
{
"mcpServers": {
"headerguard": {
"url": "https://headerguard.mike-tusa.workers.dev/mcp"
}
}
}
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
scan_headers
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://headerguard.mike-tusa.workers.dev/mcp | streamable-http | answering | 54 ms | 13 min ago |
MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
Scan websites for security vulnerabilities, headers, TLS, and email security.
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.
Grade a site's security headers with fixes and a badge; read logs or code for the defender.
Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.
Answers built from our own checks of this server.