check_security_headers
Analyze HTTP security headers against best practices to identify misconfigurations and vulnerabilities.
Instructions
Analyze HTTP security headers against best practices.
Args: headers: Dict of HTTP response headers. Example: {"Strict-Transport-Security": "max-age=31536000"}.
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation.
When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| headers | Yes | ||
| api_key | No |