check_security_headers
Analyze HTTP security headers against best practices to identify misconfigurations and vulnerabilities.
Instructions
Analyze HTTP security headers against best practices.
Args: headers: Dict of HTTP response headers. Example: {"Strict-Transport-Security": "max-age=31536000"}.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation.
When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"headers": "<headers>"
},
"name": "check_security_headers"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| headers | Yes | ||
| api_key | No |