Security Headers MCP Server

by basitalisandhuio.github.basitalisandhu/mcp-security-headersv0.1.1

Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.

1Dockerstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Active4d ago

Install Security Headers MCP server

claude mcp add security-headers -- docker run -i --rm ghcr.io/basitalisandhu/mcp-security-headers:0.1.1

{
  "mcpServers": {
    "security-headers": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/basitalisandhu/mcp-security-headers:0.1.1"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "security-headers": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/basitalisandhu/mcp-security-headers:0.1.1"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "security-headers": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/basitalisandhu/mcp-security-headers:0.1.1"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "security-headers": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/basitalisandhu/mcp-security-headers:0.1.1"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Freshness

Active — last maintenance signal 4d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-10-04 · 5d ago · GitHub
Latest release
2026-10-05 · 4d ago · GitHub · v0.1.1
Package published
no data · npm/PyPI
Registry entry updated
2026-10-05 · 4d ago · official registry · v0.1.1

FAQ

›How do I install the Security Headers MCP server in Claude Code?

Run: claude mcp add security-headers -- docker run -i --rm ghcr.io/basitalisandhu/mcp-security-headers:0.1.1. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Security Headers require an API key?

No required environment variables are declared in its published metadata.

›Can I use Security Headers as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Security Headers in the official MCP registry?

Yes, as io.github.basitalisandhu/mcp-security-headers.