Search / com.aiwebsitesecurity/ai-website-security
AI Website Security
R0· no sign-inSecurity basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
v1.0.0 · active · website · descriptor JSON · versions
Search / com.aiwebsitesecurity/ai-website-security
R0· no sign-inSecurity basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
v1.0.0 · active · website · descriptor JSON · versions
{
"mcpServers": {
"ai-website-security": {
"type": "http",
"url": "https://scan.aiwebsitesecurity.com/api/mcp"
}
}
}claude mcp add --transport http ai-website-security https://scan.aiwebsitesecurity.com/api/mcp[mcp_servers.ai-website-security]
url = "https://scan.aiwebsitesecurity.com/api/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ai-website-security": {
"type": "remote",
"url": "https://scan.aiwebsitesecurity.com/api/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"ai-website-security": {
"type": "http",
"url": "https://scan.aiwebsitesecurity.com/api/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=ai-website-security&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vc2Nhbi5haXdlYnNpdGVzZWN1cml0eS5jb20vYXBpL21jcCJ9"
}{
"servers": {
"ai-website-security": {
"type": "http",
"url": "https://scan.aiwebsitesecurity.com/api/mcp"
}
}
}{
"mcpServers": {
"ai-website-security": {
"httpUrl": "https://scan.aiwebsitesecurity.com/api/mcp"
}
}
}extensions:
"ai-website-security":
enabled: true
name: "ai-website-security"
type: streamable_http
uri: "https://scan.aiwebsitesecurity.com/api/mcp"
timeout: 300
protocol.modernsupports 2026-07-28 (server/discover)protocol.statelessanswers without a sessionprotocol.transportstreamable HTTPprotocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every useauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations2 of 2 tools declare readOnlyHint or destructiveHinttools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_site_security_basics (destructiveHint); get_security_offer (destructiveHint)tools.token_costabout 407 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changes, stability.rug_pulltool history recorded for 3 of the 7 days neededdeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+dns-namespace +website +reachable +uptime-100% +updated-3d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://scan.aiwebsitesecurity.com/api/mcp streamable-http | none | yes | 100% | 902 ms | 2026-07-28 | 2026-10-20 |
check_site_security_basicsread-only | Reads the public home page of a website as a visitor and returns the security basics: HTTPS certificate (validity, expiry date, host coverage, protocol), redirection from http to https, security headers (HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy, cookies), mixed content, and whether public DNS filtering resolvers (Cloudflare, Quad9) block the domain — a measured fact: part of the visitors cannot reach the site. It does not look for malware: that is the paid scan. Free; nothing is stored. Docs: https://aiwebsitesecurity.com/ |
get_security_offerread-only | Returns the AI Website Security offers — Record (malware and file-integrity scan with a signed report), Record + Restore (cleaning of the core files), Watch and Watch + Restore (daily watch for a year), Watch Fleet for agencies — with what each includes, its price, and the page where the site owner buys it (the owner accepts the terms and confirms ownership there). Docs: https://aiwebsitesecurity.com/tarifs |
Schemas: list_tools.
{
"name": "com.aiwebsitesecurity/ai-website-security",
"title": "AI Website Security",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://scan.aiwebsitesecurity.com/api/mcp",
"type": "streamable-http"
}
],
"version": "1.0.0",
"websiteUrl": "https://aiwebsitesecurity.com/en/assistants",
"description": "Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering."
}