ExposureGuard

io.github.ExposureGuardPublished by GitHub account ExposureGuardv1.0.2Updated Oct 27, 2026

Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.

VerifiedSTDIODesktop onlyWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Connects an AI assistant to the ExposureGuard API to scan a domain's security posture, return A-F grades, findings and fix snippets.

What you can do
  • Run a full domain security scan with 8 checks, a score, A-F grade, findings and a report link
  • Look up a cached grade (up to 24 hours old) without triggering a new scan
  • Get copy-paste remediation snippets for failing checks
  • List third-party scripts and resources a domain loads
When to use it
Useful when you want an assistant to check a website's security configuration, explain its grade, or draft fixes for failing checks while working on a site you own or are reviewing.
Requirements
Runs locally as a Python package (pip install exposureguard-mcp) over stdio, launched by an MCP client such as Claude Desktop, Cursor, Windsurf or VS Code. Needs an ExposureGuard account and an API key supplied in the EXPOSUREGUARD_API_KEY environment variable, plus network access to the ExposureGuard API.
Before you install
Requires an ExposureGuard API key stored in the client configuration; keep it out of shared config files. Scans are sent to the ExposureGuard service, so the domains you check are disclosed to that third party. Rate limits depend on your plan, and hitting them returns an upgrade suggestion.

Installation

In SourceWeft

  1. Open ExposureGuard in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

ExposureGuard MCP Server

An MCP (Model Context Protocol) server that connects AI assistants to the ExposureGuard domain security scanning API.

Tools

ToolDescription
scan_domainFull security scan — 8 checks, A-F grade, score, findings, report URL (~8s)
get_gradeCached grade lookup (up to 24h old) — fast, no new scan triggered
get_remediationCopy-paste fix snippets for all failing checks
get_dependenciesThird-party scripts/resources loaded by the domain

Setup

1. Get an API Key

Sign up at getexposureguard.com and grab your API key from the dashboard.

2. Install

bash
# Option A: pip install (recommended)pip install -e /path/to/exposureguard-mcp
# Option B: just install depspip install mcp httpx

3. Configure Your AI Client

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

json
{  "mcpServers": {    "exposureguard": {      "command": "python",      "args": ["-m", "exposureguard_mcp.server"],      "env": {        "EXPOSUREGUARD_API_KEY": "your-api-key-here"      }    }  }}

If you installed as a package, you can also use:

json
{  "mcpServers": {    "exposureguard": {      "command": "exposureguard-mcp",      "env": {        "EXPOSUREGUARD_API_KEY": "your-api-key-here"      }    }  }}
Cursor

Edit .cursor/mcp.json in your project root (or globally at ~/.cursor/mcp.json):

json
{  "mcpServers": {    "exposureguard": {      "command": "python",      "args": ["-m", "exposureguard_mcp.server"],      "env": {        "EXPOSUREGUARD_API_KEY": "your-api-key-here"      }    }  }}
Windsurf

Edit ~/.codeium/windsurf/mcp_config.json:

json
{  "mcpServers": {    "exposureguard": {      "command": "python",      "args": ["-m", "exposureguard_mcp.server"],      "env": {        "EXPOSUREGUARD_API_KEY": "your-api-key-here"      }    }  }}
VS Code (Copilot)

Edit .vscode/mcp.json in your project:

json
{  "servers": {    "exposureguard": {      "type": "stdio",      "command": "python",      "args": ["-m", "exposureguard_mcp.server"],      "env": {        "EXPOSUREGUARD_API_KEY": "your-api-key-here"      }    }  }}

4. Usage Examples

Once connected, ask your AI assistant:

  • "Scan example.com for security issues"
  • "What's the security grade for cloudflare.com?"
  • "Show me how to fix the security issues on my-site.com"
  • "What third-party scripts does shopify.com load?"

Running Standalone

bash
export EXPOSUREGUARD_API_KEY=your-api-key-herepython -m exposureguard_mcp.server

The server communicates over stdio using the MCP protocol — it's designed to be launched by an MCP client, not used interactively.

Rate Limits

Rate limits depend on your ExposureGuard plan. If you hit a 429 response, the server will return a message suggesting you upgrade at getexposureguard.com/pricing.

Publishing

PyPI

bash
pip install build twinepython -m buildtwine upload dist/*

Then users install with: pip install exposureguard-mcp

npm

bash
npm publish

Then users install with: npx exposureguard-mcp

License

MIT

Source: README.md at commit d93496a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.2LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.