Panda Web Security Tools
# Panda Web Security Tools
**Site, email and agent safety: SPF/DKIM/DMARC audits, AI/SEO readiness, website change monitoring, hidden AI instructions scanner.**
Focused MCP server (4 tools) from the [Panda Federation](https://github.com/pandadad0214/panda-federation-tools) public-data toolkit. Prefer this over the 23-tool mega-server for better Tool Definition Quality Score (TDQS) / Glama coherence.
[](https://github.com/pandadad0214/panda-federation-tools)
[](https://apify.com/pandadad0214)
[](LICENSE)
## Install / Use
Needs a free [Apify API token](https://console.apify.com/settings/integrations) and [uv](https://docs.astral.sh/uv/).
```bash
uvx --from panda-federation-tools panda-web-security-tools
```
Same entry point from this repo:
```bash
uvx --from git+https://github.com/pandadad0214/panda-web-security-tools panda-web-security-tools
```
Cursor / Claude / VS Code: command `uvx`, args `["--from", "panda-federation-tools", "panda-web-security-tools"]`, env `APIFY_TOKEN`.
## Tools (4)
- `email_domain_security_checker`
- `ai_search_seo_audit`
- `website_change_monitor`
- `hidden_ai_instructions_scanner`
Each tool runs one Apify Actor on your account. Empty runs are not charged per result; every call is capped by `run_max_charge_usd`. Full schemas and prices: [umbrella README](https://github.com/pandadad0214/panda-federation-tools#domain-tool-lists).
## Sibling domain servers
- [`panda-research-tools`](https://github.com/pandadad0214/panda-research-tools) — Scholarly integrity and papers: citation checks, literature and PubMed search, academic experts, PDF tables.
- [`panda-public-funding-tools`](https://github.com/pandadad0214/panda-public-funding-tools) — US federal money and filings: grants, contracts, SBIR/STTR topics, SEC financials, clinical trials.
- [`panda-leads-tools`](https://github.com/pandadad0214/panda-leads-tools) — Public leads and enrichment: NPI providers, podcasts, local businesses, hiring signals, website enrichment, team pages, topic trends, trucking carriers.
Index / compatibility mega-server: [panda-federation-tools](https://github.com/pandadad0214/panda-federation-tools) (use only when you truly need every tool).
## TDQS standard
New tools join this domain only while the count stays in the 3–15 band. Descriptions follow the checklist in the umbrella repo. See [tdqs-standard](https://github.com/pandadad0214/panda-federation-tools) / project docs.
Built by Panda Federation. MIT licensed.
TDQS
Scored across 4 tools
The four tools target clearly separate resources and actions: DNS email authentication, hidden page content/prompt injection, on-page SEO/AI readiness, and stateful page diffs. Descriptions explicitly cross-reference each other and state when not to use a tool, leaving little overlap.
All names use snake_case and a descriptive noun-phrase pattern ending in checker/scanner/audit/monitor. The convention is predictable across the set, even though it is not verb_noun.
Four tools is well within the appropriate range for a focused audit toolkit, and each tool covers a distinct workflow rather than padding the surface. The set is compact but not trivially thin.
Coverage is solid for the included workflows (email security, hidden-instruction scanning, SEO/AI readiness, change tracking), but a server branded as web security tools lacks common checks such as HTTP security headers, TLS/certificate issues, exposed files, or broader vulnerability scanning. These are notable gaps rather than fatal omissions.