F
licenseNot graded
qualityD
maintenanceAnalyze and score HTTP security headers (CSP, HSTS, CORS, cookies) with actionable fix recommendations for web applications.
-
Corrie Site Check
by io.corrie
Server Details
Free website check: HTTPS setup and security headers, scored with plain-English fixes. No account.
If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-06-18
- URL
TDQS
Score is being calculated.
Available Tools
1 toolcheck_websiteCheck a website's HTTPS and security headersRead-onlyIdempotentInspect
Loads the homepage of a public website once, the way a visitor's browser would, and reports its HTTPS setup and security headers (HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and others). Returns a score out of 100, a verdict, and each finding with its severity and a plain-English fix. Use it for questions like 'is example.com secure?' or 'what security headers is my site missing?'. It does not log in, submit forms, scan ports or test for vulnerabilities, and it refuses private or internal addresses.
ParametersJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | A public domain or HTTPS address, for example example.com or https://example.com/. |
Output Schema
ParametersJSON Schema
| Name | Required | Description |
|---|---|---|
| url | Yes | |
| score | Yes | |
| counts | No | |
| verdict | Yes | |
| findings | Yes | |
| final_url | No | |
| report_url | No | |
| certificate | No | |
| http_status | No | |
| limitations | No |
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- First observed
check_website
Related MCP Connectors
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
11Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Indexability, robots.txt, sitemap, TLS, domain expiry and Googlebot-vs-browser checks. No account.
91
Related MCP Servers
- AlicenseAqualityDmaintenanceAudit any website for privacy, security, accessibility, and performance issues — with scores, grades, and actionable fix instructions. No account required.314 npmMIT
- AlicenseAqualityBmaintenanceEnables live website health checks including TLS, HTTPS, and security headers, returning an A-F grade with specific fixes.2MIT
- AlicenseNot gradedqualityCmaintenanceEnables scanning any website's HTTP security headers to obtain Mozilla Observatory grades, detailed pass/fail test results with remediation guidance, and grade distribution context.15 npmMIT
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd
Glama MCP Gateway
Add one secure layer between your agents and this server.