Security Snapshot
About
An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers.
Explore
- Checks HSTS, CSP, X‑Frame‑Options, and more
- Inspects HTTPS enforcement and redirect depth
- Looks for security.txt, robots.txt, sitemap.xml
- Pay‑per‑scan: 0.05 USDC on Base via x402
- No API key, account, or subscription required
- Fully autonomous payment from the agent's wallet
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Security SnapshotCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
```json
{
"mcpServers": {
"security-snapshot": {
"command": "npx",
"args": ["-y", "mcp-server-security-snapshot"],
"env": {
"WALLET_PRIVATE_KEY": "0x...",
"NETWORK": "base"
}
}
}
}
| Tool | Description | Cost |
|------|-------------|------|
| scan_security_headers(url) | Live scan of any public URL | 0.05 USDC |
| demo_security_snapshot() | Free pre-baked example response | Free |
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"security snapshot": {
"security-snapshot": {
"command": "npx",
"args": [
"-y",
"mcp-server-security-snapshot"
],
"env": {
"WALLET_PRIVATE_KEY": "0x...",
"NETWORK": "base"
}
}
}
}
}McpServers
{
"security-snapshot": {
"command": "npx",
"args": [
"-y",
"mcp-server-security-snapshot"
],
"env": {
"WALLET_PRIVATE_KEY": "0x...",
"NETWORK": "base"
}
}
}What is Security Snapshot?
An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers — with automatic payment via the x402 protocol.Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
