Security Snapshot

by Seiya-wasabi

265 downloads
Not rated
GitHub

About

An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers.

Details

Author
Seiya-wasabi
Downloads
265
Categories
Developer Tools, Security

- Checks HSTS, CSP, X‑Frame‑Options, and more
- Inspects HTTPS enforcement and redirect depth
- Looks for security.txt, robots.txt, sitemap.xml
- Pay‑per‑scan: 0.05 USDC on Base via x402
- No API key, account, or subscription required
- Fully autonomous payment from the agent's wallet

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name Security Snapshot
    Command (node, npx, python, etc.)

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

Configure the server in Claude Desktop by adding the npx -y mcp-server-security-snapshot command and setting the WALLET_PRIVATE_KEY and NETWORK (set to "base") environment variables. Once running, use the scan_security_headers(url) tool to scan a URL for 0.05 USDC, or the free demo_security_snapshot() tool to see a sample result.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "security snapshot": {
            "security-snapshot": {
                "command": "npx",
                "args": [
                    "-y",
                    "mcp-server-security-snapshot"
                ],
                "env": {
                    "WALLET_PRIVATE_KEY": "0x...",
                    "NETWORK": "base"
                }
            }
        }
    }
}

McpServers

{
    "security-snapshot": {
        "command": "npx",
        "args": [
            "-y",
            "mcp-server-security-snapshot"
        ],
        "env": {
            "WALLET_PRIVATE_KEY": "0x...",
            "NETWORK": "base"
        }
    }
}

What is Security Snapshot?

An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers — with automatic payment via the x402 protocol.
No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.