EverThread

io.github.PB-Digital-LLCPublished by GitHub account PB-Digital-LLCv0.1.3Updated Nov 3, 2026

Plain-English website security check for agents: certificate, headers, scripts, forms, spam.

The publisher's own server: ThreadPage

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

EverThread runs a plain-English website security check — certificate, headers, scripts, forms, spam — and explains each finding to an assistant.

What you can do
  • Check a site's home page and get a plain-English security verdict covering certificate, security headers, scripts, forms, frames, redirects and well-known files
  • Look up the explanation behind a specific finding code
  • List the findings the check can report
  • Return stored results with their age when a site was already checked that week
When to use it
Useful when you own or manage a website and want an assistant to run a quick, non-invasive security review and explain what to fix first, or to gate a CI step on urgent findings.
Requirements
Runs locally over stdio via npx (Node.js required); no API key or account needed for the free check. Network access to the target site and the service is required. Desktop-only client.
Before you install
Only check sites you own or have permission to check. Results are cached to one fresh check per site per week. Public results withhold the exact address of an exposed file until the owner signs up. It loads the home page and reads page content, so the target site sees the request.

Installation

In SourceWeft

  1. Open EverThread in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

everthread

A website security check that explains itself in plain English. Free, no key, observation only.

npx everthread check yourbakery.com
EverThread · yourbakery.comWORTH A LOOK  Nothing alarming, but one thing is worth fixing.
FIX THIS WEEK  Your site lets browsers fall back to an insecure connection  The Strict-Transport-Security header is not being sent. ...  Fix: Send the technical line below to whoever runs your site. ...
  • One fresh check per site per week. Inside that week you get the stored result, its age, and a note about daily watching.
  • --json for machines, --fail-on urgent (or attention) to fail a CI step.
  • everthread explain tls.expiring and everthread findings for the explanations behind every finding.

As an MCP server

json
{ "mcpServers": { "everthread": { "command": "npx", "args": ["-y", "everthread", "mcp"] } } }

Tools: check_site, explain_finding, list_findings. Works with Claude Code, Claude Desktop, Cursor, and anything else that speaks MCP.

What it does and doesn't do

It loads the home page the way a browser does and reads the certificate, security headers, scripts, forms, frames, redirects, a fixed handful of well-known files, and the page text. It never logs in, probes for hidden paths, or runs exploit tooling. Public results withhold the exact address of an exposed file; the site owner sees it after signing up. Only check sites you own or have permission to check.

Docs: https://everthread.live/api · Every finding explained: https://everthread.live/fix/

[MCP Badge]

Source: README.md at commit 348255d

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.3LatestSep 23, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Thread integrations

ThreadPage

page.threadOfficial publisher

ThreadPage connects an AI session to your ThreadPage threads so it can read, search and add notes, and take requests you address to it.

Streamable HTTPWeb executableAuth
Productivity & WorkflowCredential requiredNov 5, 2026

Mcp Reddit Search Thread Scraper

com.mambabuilt

Searches Reddit by keyword, subreddit or thread URL and returns flat rows of posts and comments, via an Apify actor.

STDIODesktop only
Web Search & Scraping1 toolNov 3, 2026

MindThread

Published by GitHub account ppcvote

MindThread lets an assistant write, schedule and publish Threads posts, review drafted replies and read account insights through Meta's official Threads API.

Streamable HTTPWeb executable
Productivity & Workflow40 toolsOct 26, 2026

Eclipse Thread MCP

Published by GitHub account CYAN-ECLIPSE-TECHNOLOGIES-LLC

Local stdio MCP server offering on-prem bridges to a legacy software-engineering toolchain, plus an "Evidence Weaver" that joins results.

STDIODesktop only
Developer ToolsNot validated yetOct 27, 2026

Kairos Coordination Thread

Published by GitHub account agentindexworld

Free MCP tools to validate multi-agent coordination thread turns and retrieve schema/samples.

Streamable HTTPWeb executable
Not indexed yetOct 25, 2026