Home / Servers / Web and Network / security_headers_check
Security headers check
An MCP tool from the Web and Network server, hosted on mcp.hjlabs.in.
Grade a site's HTTP security headers (HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, plus leaks like Server and X-Powered-By) with an A–F grade and a concrete fix for each finding.
Name on the gateway: web__security_headers_check · read-only.
Parameters
| Name | Type | Description |
|---|---|---|
url required | string | Full URL of the page to check. |
How to call it
Through the Smart Gateway, any client can run it by name with call_tool, or let the gateway find it with search_tools:
{
"name": "web__security_headers_check",
"arguments": {
"url": "…"
}
}Or connect the Web and Network server directly, which lists 22 tools including this one:
claude mcp add --transport http hj-web https://mcp.hjlabs.in/mcp/web \
--header "Authorization: Bearer YOUR_API_KEY"Try asking
Use the security headers check tool with url set to ….