HeaderGuard

Overview

HeaderGuard is an MCP server that scans a website's HTTP security headers and provides a scoring assessment along with recommended fixes. It analyzes HSTS, Content Security Policy, framing protections, COOP/CORP headers, and cookie configurations to help you identify and resolve security gaps.

HeaderGuard runs as a remote hosted service at https://headerguard.mike-tusa.workers.dev/mcp, requiring only an API key for authentication. The latest release is v0.4.0. No local installation needed—simply connect your MCP client to the endpoint and start using it immediately.

HeaderGuard is listed in the Security category on mcp.site and works with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain HeaderGuard, claim this listing to verify ownership and keep the information up to date.

Installation

Settings → Connectors → Add custom connector
Name: HeaderGuard
URL:  https://headerguard.mike-tusa.workers.dev/mcp