Security Snapshot
About
An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers.
Details
- Author
- Seiya-wasabi
- Downloads
- 265
- Categories
- Developer Tools, Security
Jump to
- Checks HSTS, CSP, X‑Frame‑Options, and more
- Inspects HTTPS enforcement and redirect depth
- Looks for security.txt, robots.txt, sitemap.xml
- Pay‑per‑scan: 0.05 USDC on Base via x402
- No API key, account, or subscription required
- Fully autonomous payment from the agent's wallet
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Security SnapshotCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Configure the server in Claude Desktop by adding the npx -y mcp-server-security-snapshot command and setting the WALLET_PRIVATE_KEY and NETWORK (set to "base") environment variables. Once running, use the scan_security_headers(url) tool to scan a URL for 0.05 USDC, or the free demo_security_snapshot() tool to see a sample result.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"security snapshot": {
"security-snapshot": {
"command": "npx",
"args": [
"-y",
"mcp-server-security-snapshot"
],
"env": {
"WALLET_PRIVATE_KEY": "0x...",
"NETWORK": "base"
}
}
}
}
}
McpServers
{
"security-snapshot": {
"command": "npx",
"args": [
"-y",
"mcp-server-security-snapshot"
],
"env": {
"WALLET_PRIVATE_KEY": "0x...",
"NETWORK": "base"
}
}
}
What is Security Snapshot?
An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers — with automatic payment via the x402 protocol.Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.





