English Français العربية

HeaderGuard

Official registry Security

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http headerguard 'https://headerguard.mike-tusa.workers.dev/mcp' --header 'Authorization: <Optional. '\''Bearer HDRG-…'\'' (HeaderGuard Pro license) for higher limits. Works without a key.>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "headerguard": {
            "type": "http",
            "url": "https://headerguard.mike-tusa.workers.dev/mcp",
            "headers": {
                "Authorization": "<Optional. 'Bearer HDRG-…' (HeaderGuard Pro license) for higher limits. Works without a key.>"
            }
        }
    }
}

Frequently asked questions

What is HeaderGuard?

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

How do I install HeaderGuard?

It runs as a remote server. In Claude Code: claude mcp add --transport http headerguard 'https://headerguard.mike-tusa.workers.dev/mcp' --header 'Authorization: <Optional. '\''Bearer HDRG-…'\'' (HeaderGuard Pro license) for higher limits. Works without a key.>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does HeaderGuard need an API key?

Yes. It expects Authorization, which you set in its configuration.

Who maintains HeaderGuard?

It is published by dev.workers.mike-tusa.headerguard. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.