Security Snapshot
An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers.
What it checks:
- HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
- HTTPS enforcement and redirect chain depth
- Presence of security.txt, robots.txt, sitemap.xml
Payment model:
- 0.05 USDC per scan, paid automatically on Base via the x402 protocol
- No API key, no account, no subscription required
- The agent's wallet pays directly — fully autonomous
Tools provided:
- scan_security_headers(url): Live scan (costs 0.05 USDC)
- demo_security_snapshot(): Free pre-baked example
Overview
What is Security Snapshot?
An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers — with automatic payment via the x402 protocol.
What it checks
- HSTS — HTTP Strict Transport Security
- CSP — Content Security Policy
- X-Frame-Options — Clickjacking protection
- X-Content-Type-Options — MIME sniffing protection
- Referrer-Policy — Referrer information control
- Permissions-Policy — Browser feature access control
- HTTPS enforcement and redirect chain depth
- Presence of
security.txt,robots.txt,sitemap.xml
Payment model
- 0.05 USDC per scan, paid automatically on Base via the x402 protocol
- No API key, no account, no subscription required
- The agent's wallet pays directly — fully autonomous
Tools provided
| Tool | Description | Cost |
|---|---|---|
scan_security_headers(url) | Live scan of any public URL | 0.05 USDC |
demo_security_snapshot() | Free pre-baked example response | Free |
Claude Desktop setup
{
"mcpServers": {
"security-snapshot": {
"command": "npx",
"args": ["-y", "mcp-server-security-snapshot"],
"env": {
"WALLET_PRIVATE_KEY": "0x...",
"NETWORK": "base"
}
}
}
}
Server Config
{
"mcpServers": {
"security-snapshot": {
"command": "npx",
"args": [
"-y",
"mcp-server-security-snapshot"
],
"env": {
"WALLET_PRIVATE_KEY": "0x...",
"NETWORK": "base"
}
}
}
}Project Info
Created At
2 months agoUpdated At
2 months agoAuthor Name
LeanOfficeTechnologiesStar
-Language
-License
-Recommend Servers
View AllMemory
@modelcontextprotocol
a year ago
Playwright Mcp
@microsoft
Playwright MCP server
TypeScript
10 months ago
Filesystem
@modelcontextprotocol
2 months ago
Tavily Mcp
@tavily-ai
JavaScript
a year ago