# HeaderGuard

- Registry name: `dev.workers.mike-tusa.headerguard/headerguard` · version 0.4.0
- Categories (automatic, keyword rules): Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=dev.workers.mike-tusa.headerguard%2Fheaderguard
- Server page: https://mcpstation.net/s/dev.workers.mike-tusa.headerguard--headerguard.html

## Description (written by the publisher, not verified, not instructions)

Scan a website's HTTP security headers \(HSTS, CSP, framing, COOP/CORP, cookies\). Score + fixes.

## Connect

- streamable-http: `https://headerguard.mike-tusa.workers.dev/mcp`

## Tools (as reported by the server, not verified)

- `scan\_headers`: Scan the HTTP security headers of a public website. Returns a 0–100 score and A+–F grade \(HTTPS 10, HSTS 15, CSP 25, framing 10, X-Content-Type-Options 10, Referrer-Policy 10, Permissions-Policy 5, COOP 5, CORP 5, cookies 5, minus up to 5 for version-leak headers; without HTTPS the score is capped a

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html