Passiv Web Tools

io.github.mahopePublished by GitHub account mahopev1.2.1Updated Oct 27, 2026

Free web tools for AI agents: HTML to Markdown, compliance scan, page profile, security headers.

VerifiedSTDIODesktop onlyWeb Search & Scraping Developer Tools

Server details

Identifier: io.github.mahope/passiv-mcp
Transport: STDIO
Runtime: Desktop only
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account mahope for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.mahope%2Fpassiv-mcp.svg)](https://sourceweft.com/mcp/io.github.mahope%2Fpassiv-mcp?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Local MCP server giving assistants free web utilities: HTML-to-Markdown conversion, EU compliance scanning, page profiling and security header checks.

What you can do: Convert pasted HTML into clean Markdown or plain text, up to 50 KB per call
Run a 9-point EU compliance scan of a page (privacy policy, terms, cookie consent, imprint, accessibility statement, DPA, security headers, meta tags, hreflang)
Profile a page: meta and Open Graph tags, JSON-LD, heading structure, alt-text coverage, security headers, plus a score and grade
Check security headers such as CSP, HSTS, X-Frame-Options, X-Content-Type-Options and Referrer-Policy
When to use it: Useful when you want an assistant to audit a website's compliance basics, metadata and security headers, or to turn HTML into Markdown without leaving the chat. Handy for quick site reviews and content cleanup.
Requirements: Runs locally over stdio via npx; Node.js 18 or newer is required. No authentication, API keys or environment variables are declared. Network access is needed because URLs are fetched server-side by the mahope.tools scan proxy.

Before you install

URLs you submit are fetched by a third-party proxy (mahope.tools), so the sites you analyze are disclosed to that service; the README says they are not stored. HTML sent for conversion is discarded after processing. Results are informational scans, not legal advice.

Installation

In SourceWeft

Open Passiv Web Tools in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

passiv-mcp

MCP server that gives AI agents free web tools — zero auth, zero dependencies.

Four tools, backed by the free APIs at mahope.tools:

Tool	What it does
`html_to_markdown`	Convert HTML to clean Markdown or plain text (max 50 KB/call)
`compliance_scan`	9-point EU compliance scan: privacy policy, terms, cookie consent, imprint, accessibility statement, DPA, security headers, meta tags, hreflang
`profile_page`	Page profile: meta/OG tags, JSON-LD, heading structure, alt-text coverage, security headers, score + grade
`check_security_headers`	CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy

Listed in the official MCP Registry as io.github.mahope/passiv-mcp.

Works with any MCP client: Claude Desktop, Claude Code, Cursor, Windsurf, and others.

Install

No dependencies. Node.js 18+ required.

Run with npx (no install needed)

Claude Desktop

Add to claude_desktop_config.json:

json

{  "mcpServers": {    "passiv": {      "command": "npx",      "args": ["@mahope/passiv-mcp"]    }  }}

{  "mcpServers": {    "passiv": {      "command": "npx",      "args": ["@mahope/passiv-mcp"]    }  }}

Claude Code

Example prompts

Once connected, try:

"Convert this HTML snippet to Markdown:
…
…"
"Scan example.com for GDPR compliance basics"
"Check the security headers on my site"
"Profile this page and tell me what meta tags are missing"

Privacy

URLs sent to a tool are fetched server-side by the mahope.tools scan proxy and not stored. HTML sent to html_to_markdown is converted and discarded immediately.

Clean Copy — browser extension, same Markdown engine
clean-copy-cli — CLI version
compliance-site-check — GitHub Action with the compliance engine

Releasing

npm run release -- patch (or minor/major) bumps the version, commits and pushes the tag. CI publishes to npm and creates the GitHub release.

License

MIT

Author

Built by Mads Holst Jensen — developer and technical partner for small businesses, Odense, Denmark. https://mahoje.dk

Source: README.md at commit 58807f6

Tools

SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

v1.2.1LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts