protogrid

Search / com.attackerview/website-security-check

AttackerView quick website security check

R0· no sign-in

Passive security check of a domain: headers, TLS, DNS and email authentication. No login needed.

v1.0.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality94new
Trust83of 100
Uptime, 30 days100%
Latency p50515 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "website-security-check": {
      "type": "http",
      "url": "https://attackerview.com/api/public/mcp"
    }
  }
}
claude mcp add --transport http website-security-check https://attackerview.com/api/public/mcp
[mcp_servers.website-security-check]
url = "https://attackerview.com/api/public/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "website-security-check": {
      "type": "remote",
      "url": "https://attackerview.com/api/public/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "website-security-check": {
      "type": "http",
      "url": "https://attackerview.com/api/public/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=website-security-check&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXR0YWNrZXJ2aWV3LmNvbS9hcGkvcHVibGljL21jcCJ9"
}
{
  "servers": {
    "website-security-check": {
      "type": "http",
      "url": "https://attackerview.com/api/public/mcp"
    }
  }
}
{
  "mcpServers": {
    "website-security-check": {
      "httpUrl": "https://attackerview.com/api/public/mcp"
    }
  }
}
extensions:
  "website-security-check":
    enabled: true
    name: "website-security-check"
    type: streamable_http
    uri: "https://attackerview.com/api/public/mcp"
    timeout: 300

Quality 94 / 100new

protocol88 · weight 25
  • pass
    protocol.modernsupports 2026-07-28 (server/discover)
  • pass
    protocol.statelessanswers without a session
  • pass
    protocol.transportstreamable HTTP
  • warn
    protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations1 of 1 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 196 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
  • pass
    tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 3 of the 7 days needed
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

1 tools, about 196 tokens to load them all · tool set 71386b96ad0a · tools last changed 2026-11-10 · checked 2026-11-14 07:36 UTC

Tool changes

  • check_website_securitychangedoutput schema

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository
provenance55
liveness100
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-4d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://attackerview.com/api/public/mcp streamable-httpnoneyes100%515 ms2026-07-282026-11-14

Tools (1)

check_website_securityread-onlyAttackerView's quick website security check: reports problems with a domain's security headers, HTTP to HTTPS redirect, DNS, email authentication and TLS. Use when the user asks things like 'is example.com secure?' or 'are my security headers, SSL, SPF or DMARC set up right?'. Passive check in seconds: one homepage request. No login, crawling or attacks, so it cannot find application vulnerabilities.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "com.attackerview/website-security-check",
  "title": "AttackerView quick website security check",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://attackerview.com/api/public/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://attackerview.com",
  "description": "Passive security check of a domain: headers, TLS, DNS and email authentication. No login needed."
}