English Français العربية

SiteGuardian

السجل الرسمي الأمن

EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.

الشيفرة المصدرية الموقع التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http siteguardian 'https://mcp.siteguardian.io' --header 'Authorization: <Bearer <api-key> — required for the four authenticated tools (list_monitored_domains, get_domain_status, get_drift_events, get_fix_recommendations). The scan_domain tool works anonymously without this header. Get a key at https://siteguardian.io/settings>'
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "siteguardian": {
            "type": "http",
            "url": "https://mcp.siteguardian.io",
            "headers": {
                "Authorization": "<Bearer <api-key> — required for the four authenticated tools (list_monitored_domains, get_domain_status, get_drift_events, get_fix_recommendations). The scan_domain tool works anonymously without this header. Get a key at https://siteguardian.io/settings>"
            }
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. SiteGuardian MCP — Examples & Client Configurations
  2. What is the SiteGuardian MCP server?
  3. Five tools
  4. Try the anonymous tool (no setup required)
  5. Install in your client
  6. Authentication
  7. Privacy
  8. Server manifest
  9. Roadmap
  10. License
  11. Support

SiteGuardian MCP — Examples & Client Configurations

Client configurations, copy-paste examples, and the MCP server manifest for the SiteGuardian Model Context Protocol server.

Note: This repository contains examples and client integration code only. The MCP server itself is hosted at **https://mcp.siteguardian.io** and is operated as a SaaS — server source is closed. Everything in this repo is MIT-licensed and free to fork.

What is the SiteGuardian MCP server?

A hosted MCP endpoint that lets Claude Desktop, Claude Code, Cursor, Windsurf, and VS Code Copilot query website-monitoring data and run security/compliance scans through natural-language tool calls.

  • Endpoint: https://mcp.siteguardian.io (or the canonical https://siteguardian.io/mcp)
  • Transport: Streamable HTTP
  • Hosting: Hetzner, Germany — EU data residency
  • Documentation: https://siteguardian.io/docs/mcp

Five tools

ToolAuthPurpose
scan_domainanonymousOne-off security scan, A–F grade + top 3 issues + permalink
list_monitored_domainsBearerDomains under continuous monitoring for the account
get_domain_statusBearerCurrent grade + active issues for a monitored domain
get_drift_eventsBearerRecent posture changes (TLS, DNSSEC, headers, cookies, JS hosts)
get_fix_recommendationsBearer + paid plannginx/Apache/DNS snippets + verify commands

Try the anonymous tool (no setup required)

curl -X POST https://mcp.siteguardian.io/ \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"scan_domain","arguments":{"domain":"example.com"}}}'

Rate-limited to 10 calls/hour/IP. Cached for 2h per domain. Full curl/Python/JS examples in examples/.

Install in your client

All clients use the same endpoint. Copy-paste configs in clients/:

Authentication

The scan_domain tool is anonymous. The four monitoring tools require a Bearer key:

  1. Sign in at https://siteguardian.io
  2. Open Settings → API & Integrations
  3. Click Generate key, name it, copy it
  4. Add to your client config:
     "headers": {"Authorization": "Bearer sg_live_..."}

API keys are available on the Monitor, Compliance, and Enterprise plans.

Privacy

  • EU-hosted. Hetzner Germany. No US sub-processor.
  • No LLM in the response path. Tool answers are deterministic from monitoring data.
  • No training on your queries. Logged for abuse prevention and billing only.
  • Audit trail. Every tool call is recorded in the SHA-256 hash chain.

Server manifest

The full machine-readable MCP server manifest is in server.json — this is the file consumed by the Anthropic MCP Registry and the various community directories.

Roadmap

  • [ ] OAuth 2.1 (per current MCP spec)
  • [ ] resources and prompts in addition to tools
  • [ ] Listing in the official Anthropic MCP Registry
  • [ ] Listing on Smithery and mcp.so

License

Examples and client configurations in this repository are released under the MIT License — see LICENSE.

The SiteGuardian MCP server itself is proprietary and hosted as a SaaS. Server source is not distributed.

Support

الأسئلة الشائعة

ما هو SiteGuardian؟

EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.

كيف أثبّت SiteGuardian؟

يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http siteguardian 'https://mcp.siteguardian.io' --header 'Authorization: <Bearer <api-key> — required for the four authenticated tools (list_monitored_domains, get_domain_status, get_drift_events, get_fix_recommendations). The scan_domain tool works anonymously without this header. Get a key at https://siteguardian.io/settings>'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج SiteGuardian إلى مفتاح API؟

نعم. يتطلب Authorization، وتضبطها في إعداداته.

هل SiteGuardian مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون SiteGuardian؟

ينشره gweber. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.