Security Snapshot MCP Server

@Seiya-wasabi

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

Seiya-wasabi

提交者

佐藤誠也

关于 Security Snapshot MCP Server

An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers.

#security#headers#csp#hsts#x402 #usdc #base #cybersecurity

Security Snapshot MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "security-snapshot": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-server-security-snapshot"
      ],
      "env": {
        "WALLET_PRIVATE_KEY": "0x...",
        "NETWORK": "base"
      }
    }
  }
}

Security Snapshot MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Security Snapshot?

Security Snapshot is an MCP server that enables Claude and other AI agents to audit any public URL's HTTP security headers, with automatic payment via the x402 protocol. It is designed for developers and security professionals who want to automate security header checks.

How to use Security Snapshot?

Configure the server in Claude Desktop by adding the npx -y mcp-server-security-snapshot command and setting the WALLET_PRIVATE_KEY and NETWORK (set to "base") environment variables. Once running, use the scan_security_headers(url) tool to scan a URL for 0.05 USDC, or the free demo_security_snapshot() tool to see a sample result.

Key features of Security Snapshot

Checks HSTS, CSP, X‑Frame‑Options, and more
Inspects HTTPS enforcement and redirect depth
Looks for security.txt, robots.txt, sitemap.xml
Pay‑per‑scan: 0.05 USDC on Base via x402
No API key, account, or subscription required
Fully autonomous payment from the agent's wallet

Use cases of Security Snapshot

Automatically audit your own website's security headers during CI
Verify third‑party URLs for security best practices before linking
Demo the capability for free before spending any USDC

常见问题

How does payment work?

Each scan costs 0.05 USDC, paid automatically on the Base network using the x402 protocol. The agent's wallet pays directly, so no API key or account is needed.

What HTTP security headers are checked?

HSTS, CSP, X‑Frame‑Options, X‑Content‑Type‑Options, Referrer‑Policy, Permissions‑Policy, plus HTTPS enforcement, redirect chain depth, and the presence of `security.txt`, `robots.txt`, and `sitemap.xml`.

Do I need an account or subscription?

No. There is no account, no API key, and no subscription. You only need a wallet with USDC on Base to pay per scan.

What are the required environment variables?

Set `WALLET_PRIVATE_KEY` (your wallet's private key) and `NETWORK` (set to `"base"`) in the server configuration.

Is there a way to test without spending money?

Yes, call the `demo_security_snapshot()` tool, which returns a free pre‑baked example response.

开发工具分类下的更多 MCP 服务器

Testiny MCP server

Mategra GmbH

Testiny is a test case management platform. Its remote MCP server lets AI assistants such as Claude, ChatGPT, GitHub Copilot, Cursor and other MCP clients work directly with your Testiny data. Browse and search projects,

Meticulous

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

FARPY

mangomunchr

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP

ArtiBot Cloud MCP - Zhijiangyun 智匠云

bofob

ArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation