Mcp Server Security Audit

A local MCP server that lets an assistant scan websites for security vulnerabilities, HTTP headers, TLS configuration and email security.

What you can do

Scan websites for security vulnerabilities, HTTP headers, TLS configuration and email security. The manifest lists no individual tools, so the exact operations are not documented; the stated scope is website security auditing. It runs as a local process on the user's machine over stdio.

When to use it

Useful when you want an assistant to check a site's security posture — headers, TLS and email security settings — during a review or before deployment. It is a narrow auditing helper rather than a general web tool.

Requirements

Runs as a local process over stdio, installed from the npm package mcp-server-security-audit, so Node.js and npm are needed. No authentication, environment variables or headers are declared. Network access to the target websites is implied by the scanning purpose.