HTTP Security Headers
http_security_headersFetch a URL and grade its HTTP security headers. Returns a score from 0-100, an A-F grade, and detailed per-header notes.
Instructions
Fetch a URL and grade its HTTP security headers (HSTS, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP). Returns a 0–100 score, an A–F grade, and per-header notes.
Args:
url (string): URL or host to check (scheme defaults to https://).
response_format ('markdown' | 'json'): output format (default 'markdown').
Returns: { url, final_url, status, grade, score, checks[{header, present, value, note}], missing[] }.
Example: "Grade the security headers on https://news.ycombinator.com" -> http_security_headers(url="https://news.ycombinator.com"). Errors: returns an error if the URL is invalid or the host is unreachable.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | URL or host to check, e.g. 'https://example.com'. | |
| response_format | No | Output format: 'markdown' for a human-readable summary (default) or 'json' for the full structured payload. | markdown |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | ||
| final_url | Yes | ||
| status | Yes | ||
| grade | Yes | ||
| score | Yes | ||
| checks | Yes | ||
| missing | Yes |