MCP server

HeaderGuard

dev.workers.mike-tusa.headerguard/headerguard

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

Website

At a glance

Type

MCP server

Publisher

Not verified

Status

Working at last check

Tools

1

Token cost

About 368 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http headerguard https://headerguard.mike-tusa.workers.dev/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.headerguard]
url = "https://headerguard.mike-tusa.workers.dev/mcp"

Gemini CLI

{"mcpServers":{"headerguard":{"httpUrl":"https://headerguard.mike-tusa.workers.dev/mcp"}}}

Cursor

{"mcpServers":{"headerguard":{"url":"https://headerguard.mike-tusa.workers.dev/mcp"}}}

VS Code

{"servers":{"headerguard":{"type":"http","url":"https://headerguard.mike-tusa.workers.dev/mcp"}}}

Antigravity

agy mcp add headerguard https://headerguard.mike-tusa.workers.dev/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"headerguard","server_url":"https://headerguard.mike-tusa.workers.dev/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"headerguard","server_url":"https://headerguard.mike-tusa.workers.dev/mcp"}

Tools

• scan_headers ~368 tokens
  Scan the HTTP security headers of a public website. Returns a 0–100 score and A+–F grade (HTTPS 10, HSTS 15, CSP 25, framing 10, X-Content-Type-Options 10, Referrer-Policy 10, Permissions-Policy 5, COOP 5, CORP 5, cookies 5, minus up to 5 for version-leak headers; without HTTPS the score is capped a

Browse

• Cloudflare tools
• Vercel tools
• Cloud and hosting

Related MCP servers

• SimplyScan
  Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
• OrionCMD Checks
  Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402).
• Dechonet
  30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
• BlackVeil DNS & Email Security Scanner
  DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
• Mozilla Observatory
  MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
• AgentsToolsHub
  156 paid-per-call JSON APIs for AI agents over x402: calculators, live data, crypto, security, dev.
• Zovo Website Status Checker
  Is it down, or just you?
• AI Website Security
  Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/dev.workers.mike-tusa.headerguard/headerguard.svg)](https://aptlynx.net/servers/dev.workers.mike-tusa.headerguard/headerguard)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents