$ loading_
Analyze and score HTTP security headers with actionable remediation guidance.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "http-security-headers-mcp" yet — see the docs or source repo.
Analyze the HTTP security headers for https://example.com, focusing on CSP, HSTS, CORS, and cookie attributes. Provide a risk score, explain issues found, and give prioritized remediation steps.
A header security report with scores, misconfigurations, risk levels, and concrete fixes.
Here is our new response header configuration. Evaluate whether there are security issues and identify which settings may affect browser security policies or cross-origin access: Content-Security-Policy: default-src 'self'; Strict-Transport-Security: max-age=300; Access-Control-Allow-Origin: *; Set-Cookie: sessionId=abc123
An itemized assessment of each header, highlighting vulnerabilities, compatibility impact, and recommended alternatives.
Based on the following header findings, create a remediation checklist for the development and DevOps teams, including issue, impact, recommended configuration, and priority: missing X-Content-Type-Options; HSTS max-age too short; CORS allows any origin; cookies lack Secure and HttpOnly.
A structured remediation checklist that teams can assign and track easily.
Review and fix Power Pages security headers, CSP, CORS, cookies, and embedding settings.
Analyze MCP tool security risks, detect malicious behavior, and provide risk scores.
Audit MCP servers for spec compliance, security risks, and remediation guidance.
Get CVE-based security review prompts to find risky code vulnerabilities faster.
Let LLMs make secure HTTP requests with auth, retries, and debugging support.
Analyze contract safety risks, flag dangerous clauses, and suggest improvements.