NestDaddy

HeaderGuard

dev.workers.mike-tusa.headerguard/headerguard · v0.4.0

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

Connect Remote server

Terminal
claude mcp add --transport http headerguard https://headerguard.mike-tusa.workers.dev/mcp --header "Authorization: Bearer <YOUR_API_KEY>"
~/.cursor/mcp.json
{
  "mcpServers": {
    "headerguard": {
      "url": "https://headerguard.mike-tusa.workers.dev/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_API_KEY>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "headerguard": {
      "type": "http",
      "url": "https://headerguard.mike-tusa.workers.dev/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_API_KEY>"
      }
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://headerguard.mike-tusa.workers.dev/mcp

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools 1 found in our last check

  • scan_headers

    Scan the HTTP security headers of a public website. Returns a 0–100 score and A+–F grade (HTTPS 10, HSTS 15, CSP 25, framing 10, X-Content-Type-Options 10, Referrer-Policy 10, Permissions-Policy 5, COOP 5, CORP 5, cookies 5, minus up to 5 for version-leak headers; without HTTPS…

Headers

NameDescription
Authorization
Optional, secret
Optional. 'Bearer HDRG-…' (HeaderGuard Pro license) for higher limits. Works without a key.

Details

Endpointhttps://headerguard.mike-tusa.workers.dev/mcp (Streamable HTTP)
First published9 Oct 2026
Last updated9 Oct 2026
Registry namedev.workers.mike-tusa.headerguard/headerguard

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.