Which integrations are available for this server?

Generate recommended security headers configuration for Apache HTTP servers. Generate recommended security headers configuration for Cloudflare deployments. Generate recommended security headers configuration for Express.js applications. Generate recommended security headers configuration for Next.js applications. Generate recommended security headers configuration for NGINX web servers. Generate recommended security headers configuration for Vercel deployments.

How do I use http-security-headers-mcp?

This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.

http-security-headers-mcp

Analyze and score HTTP security headers (CSP, HSTS, CORS, cookies) with actionable fix recommendations for web applications.

Tools

Tool	Description
`scan_headers`	Fetch a URL and analyze all security headers. Returns A+ to F grade with findings.
`score_headers`	Score a set of headers you provide. Returns grade and per-header breakdown.
`analyze_csp`	Deep analysis of a Content-Security-Policy header. Detects unsafe sources and bypass risks.
`generate_headers`	Generate recommended security headers config for Express, Next.js, nginx, Apache, Cloudflare, or Vercel.

Related MCP server: mcp-headers

Quick Start

Install from MCPize (Recommended)

npx -y mcpize connect @shakiltousif/http-security-headers-mcp --client claude

Or visit: mcpize.com/mcp/http-security-headers-mcp

Per-client install

Claude:    claude mcp add --transport http http-security-headers-mcp https://http-security-headers-mcp.mcpize.run/mcp
Cursor:    cursor mcp add http-security-headers-mcp https://http-security-headers-mcp.mcpize.run/mcp
Windsurf:  windsurf mcp add http-security-headers-mcp https://http-security-headers-mcp.mcpize.run/mcp

JSON Config (manual setup)

{
  "mcpServers": {
    "http-security-headers-mcp": {
      "url": "https://http-security-headers-mcp.mcpize.run/mcp"
    }
  }
}

Run Locally

npm install
mcpize dev              # Start dev server with hot reload
mcpize dev --playground # Interactive testing in your browser

Server runs at http://localhost:3000/mcp

Development

mcpize dev         # Development mode (port 3000, hot reload, loads .env)
npm run build      # Compile TypeScript
npm test           # Run unit tests (26 tests)
bash test-mcp.sh   # MCP protocol smoke test (14 checks)
npm start          # Run compiled server (port 8080)

Deploy

mcpize login                # Authenticate (opens browser)
mcpize deploy               # Ship it!

Project Structure

src/
  index.ts          # Express + MCP server setup, tool registration
  tools.ts          # Pure business logic (header analysis, scoring, CSP parsing)
tests/
  tools.test.ts     # Unit tests (vitest)
test-mcp.sh         # MCP protocol smoke test
mcpize.yaml         # MCPize deployment config
Dockerfile          # Production container build

License

MIT

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive

ResponsivenessNo recent community issues

Resources

Related MCP Connectors

HeaderGuardA
dev.workers.mike-tusa.headerguard
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
Penetration Testing Security
11
https://headerguard.mike-tusa.workers.dev/mcp
Go-Live CheckA
com.dontdeployonfriday
Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.
Security Penetration Testing Testing & QA Tools
41
https://dontdeployonfriday.com/mcp
Mozilla ObservatoryA
io.github.pipeworx-io
MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
Penetration Testing Security
471
https://gateway.pipeworx.io/mozilla-observatory/mcp
ScanLabsAI Security ScannerA
com.scanlabsai
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Penetration Testing Security
81
https://scanlabsai.com/api/mcp

Related MCP Servers

http-headers
Security Penetration Testing
Br0ski777
A
license
Not graded
quality
C
maintenance
Enables users to analyze HTTP response headers of any URL for security and configuration, returning a 0-100 security score, HSTS/CSP and header checks, server detection, caching details, and recommendations. Supports pay-per-call access via x402 micropayments.
Updated 2 months ago (2026-09-02 19:56 UTC)
MIT
mcp-headers
Penetration Testing Security
CACTUSCASH
A
license
A
quality
C
maintenance
Enables Claude to scan a website's HTTP security headers and receive an A–F grade against OWASP best practices, including per-header pass/warn/fail results and copy-paste fixes for missing headers.
Updated 2 months ago (2026-08-31 10:28 UTC)
1
MIT
web-security-guard
Security Penetration Testing
1nc0gn30
A
license
Not graded
quality
B
maintenance
Enables AI agents to audit URLs for security headers, generate CSP Level 3 policies, compute SRI hashes, evaluate WCAG 2.2 contrast, and remediate headers.
Updated 7 days ago (2026-11-03 14:24 UTC)
MIT
mozilla-observatory
Security Penetration Testing
pipeworx-io
A
license
Not graded
quality
C
maintenance
Enables scanning any website's HTTP security headers to obtain Mozilla Observatory grades, detailed pass/fail test results with remediation guidance, and grade distribution context.
Updated 17 hours ago (2026-11-09 14:21 UTC)
308 npm
MIT