HeaderGuard
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
| Endpoint | https://headerguard.mike-tusa.workers.dev/mcp (streamable-http) |
|---|---|
| Registry version | 0.4.0 |
| Now | 1 tools · grade A (99) · pin ts_ff8d1e3ed4e21dd31bcd5e98d0757f2a · protocol 2025-06-18 |
| First / last listed | 2026-10-25 01:27 UTC / 2026-10-25 01:27 UTC |
| Grade over time | 2026-10-25: A (99), 1 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: scan_headers
scan_headers | Scan the HTTP security headers of a public website. Returns a 0–100 score and A+–F grade (HTTPS 10, HSTS 15, CSP 25, framing 10, X-Content-Type-Options 10, Referrer-Policy 10, Permissions-Policy 5, COOP 5, CORP 5, cookies 5, minus up to 5 for version-leak headers; without HTTPS the score is capped at 39), each header's status and notes, recommended fix headers, and a link to the full report with c params: url*, include_raw |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.