Advertise
MCP.so
Sign In
S

Security Snapshot MCP Server

@Seiya-wasabi

Repository

Basic information

Category

Developer Tools

Transports

stdio

Author

Seiya-wasabi

Submitted by

佐藤 誠也

About Security Snapshot MCP Server

An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers.

#security#headers#csp#hsts#x402#usdc#base#cybersecurity

Security Snapshot MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "security-snapshot": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-server-security-snapshot"
      ],
      "env": {
        "WALLET_PRIVATE_KEY": "0x...",
        "NETWORK": "base"
      }
    }
  }
}

Security Snapshot MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Security Snapshot?

Security Snapshot is an MCP server that enables Claude and other AI agents to audit any public URL's HTTP security headers, with automatic payment via the x402 protocol. It is designed for developers and security professionals who want to automate security header checks.

How to use Security Snapshot?

Configure the server in Claude Desktop by adding the npx -y mcp-server-security-snapshot command and setting the WALLET_PRIVATE_KEY and NETWORK (set to "base") environment variables. Once running, use the scan_security_headers(url) tool to scan a URL for 0.05 USDC, or the free demo_security_snapshot() tool to see a sample result.

Key features of Security Snapshot

  • Checks HSTS, CSP, X‑Frame‑Options, and more
  • Inspects HTTPS enforcement and redirect depth
  • Looks for security.txt, robots.txt, sitemap.xml
  • Pay‑per‑scan: 0.05 USDC on Base via x402
  • No API key, account, or subscription required
  • Fully autonomous payment from the agent's wallet

Use cases of Security Snapshot

  • Automatically audit your own website's security headers during CI
  • Verify third‑party URLs for security best practices before linking
  • Demo the capability for free before spending any USDC

Frequently asked questions

1

How does payment work?

Each scan costs 0.05 USDC, paid automatically on the Base network using the x402 protocol. The agent's wallet pays directly, so no API key or account is needed.

2

What HTTP security headers are checked?

HSTS, CSP, X‑Frame‑Options, X‑Content‑Type‑Options, Referrer‑Policy, Permissions‑Policy, plus HTTPS enforcement, redirect chain depth, and the presence of `security.txt`, `robots.txt`, and `sitemap.xml`.

3

Do I need an account or subscription?

No. There is no account, no API key, and no subscription. You only need a wallet with USDC on Base to pay per scan.

4

What are the required environment variables?

Set `WALLET_PRIVATE_KEY` (your wallet's private key) and `NETWORK` (set to `"base"`) in the server configuration.

5

Is there a way to test without spending money?

Yes, call the `demo_security_snapshot()` tool, which returns a free pre‑baked example response.

Comments

More Developer Tools MCP servers

Eddyter AI Rich Text Editor MCP

EddyterAI

Set up and manage the Eddyter AI rich text editor by talking to your AI agent — for Claude, Cursor, Codex and other MCP tools. A Model Context Protocol server that lets AI tools add Eddyter to a React, Next.js, Vite or R

9

Eased

easedui

Eased is a library of motion-first React components for shadcn, installed with the shadcn CLI.

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

1

ZeroBeacon — 1000-Tool Collision-Proof Commerce Router

DavidFox998

ZeroBeacon.ai — Collision-proof commerce router for AI agents. 1000 MCP tools: commerce, trust, billing, sovereign ID + everyday tools. LIVE.

Jaybird Digital

Steve Wheeler

Jaybird Digital lets you build a website for you in the conversation. Tell your ai about your business and what you want, and it writes the pages and saves them to Jaybird. You get a link to view the site right away, wi

Advertise