exposureguard avatar

ExposureGuard

exposureguard/exposureguard-mcp

Connects Claude and other MCP clients to the ExposureGuard domain security API. You get four tools: scan_domain runs a full security audit with 8 checks and returns an A-F grade plus findings, get_grade pulls cached results for speed, get_remediation spits out copy-paste fix snippets for failing checks, and get_dependencies shows third-party scripts loaded by a domain. Scans take around 8 seconds. Useful when you're auditing sites in conversation or need security context without leaving your editor. Requires an ExposureGuard API key from their dashboard. Rate limits apply based on your plan tier.

tools
4
transport
STDIO
last updated
Mar 31, 2026

Tools

4 tools

Public tool metadata for what this MCP can expose to an agent.

scan_domainRun a comprehensive 8-point security audit on any domain. Checks SPF (email spoofing prevention), DMARC (email authentication policy), SSL/TLS certificate validity, HTTPS redirect enforcement, security headers (X-Frame-Options, Content-Security-Policy, Strict-Transport-Securit...1 params

Run a comprehensive 8-point security audit on any domain. Checks SPF (email spoofing prevention), DMARC (email authentication policy), SSL/TLS certificate validity, HTTPS redirect enforcement, security headers (X-Frame-Options, Content-Security-Policy, Strict-Transport-Securit...

Parameters* required
domainstring
The domain name to scan, without protocol or path (e.g. 'example.com', 'api.stripe.com')
get_gradeRetrieve the most recent cached security grade for a domain without triggering a new scan. Returns the letter grade (A-F), numeric score (0-100), and timestamp of when the grade was last calculated. Results may be up to 24 hours old. Use this for quick lookups when you need a...1 params

Retrieve the most recent cached security grade for a domain without triggering a new scan. Returns the letter grade (A-F), numeric score (0-100), and timestamp of when the grade was last calculated. Results may be up to 24 hours old. Use this for quick lookups when you need a...

Parameters* required
domainstring
The domain name to look up (e.g. 'example.com')
get_remediationGet actionable, copy-paste fix instructions for every failing security check on a domain. Returns specific DNS TXT records to add (SPF, DMARC), server configuration snippets (Nginx, Apache, Cloudflare) for security headers and HTTPS redirects, and step-by-step instructions for...1 params

Get actionable, copy-paste fix instructions for every failing security check on a domain. Returns specific DNS TXT records to add (SPF, DMARC), server configuration snippets (Nginx, Apache, Cloudflare) for security headers and HTTPS redirects, and step-by-step instructions for...

Parameters* required
domainstring
The domain to get fix instructions for (e.g. 'example.com')
get_dependenciesDiscover all third-party scripts, stylesheets, fonts, images, and iframes loaded by a domain's website. Returns each external resource with its type (script/stylesheet/image/iframe), host, and full URL. Useful for supply-chain risk assessment — reveals what external services t...1 params

Discover all third-party scripts, stylesheets, fonts, images, and iframes loaded by a domain's website. Returns each external resource with its type (script/stylesheet/image/iframe), host, and full URL. Useful for supply-chain risk assessment — reveals what external services t...

Parameters* required
domainstring
The domain to analyze for third-party dependencies (e.g. 'example.com')

Sponsors

Readme

ExposureGuard MCP Server

An MCP (Model Context Protocol) server that connects AI assistants to the ExposureGuard domain security scanning API.

Tools

ToolDescription
scan_domainFull security scan — 8 checks, A-F grade, score, findings, report URL (~8s)
get_gradeCached grade lookup (up to 24h old) — fast, no new scan triggered
get_remediationCopy-paste fix snippets for all failing checks
get_dependenciesThird-party scripts/resources loaded by the domain

Setup

1. Get an API Key

Sign up at getexposureguard.com and grab your API key from the dashboard.

2. Install

# Option A: pip install (recommended)
pip install -e /path/to/exposureguard-mcp

# Option B: just install deps
pip install mcp httpx

3. Configure Your AI Client

Claude Desktop

View the full README on GitHub

Details

Repository
github.com/exposureguard/exposureguard-mcp
Category
Security & Pentesting
Package
exposureguard-mcp
Transport
STDIO
Registry
MCP registry, active

More from exposureguard

Related Security & Pentesting MCP servers

View all
1finishkit avatarMcpfinishkit/mcpFinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality0stars
2hadinkof avatarCapabilitymap Nexus Mcphadinkof/capabilitymap-nexus-mcpGitHub Capability Router (666 repos, 96.4% token savings) & 5-Vector Prompt-Injection Firewall.0stars
3pentagonal-ai avatarPentagonal Mcppentagonal-ai/pentagonalAI smart contract forge — 8-agent security audits, generation, and compilation across 8 chains0stars
4br0ski777 avatarHTTP Headers Analyzer APIbr0ski777/http-headers-x402HTTP header analysis — security headers, cache, server detection. x402 micropayment.0stars
5clerk avatarClerkio.github.clerk/mcp-serverAccess Clerk authentication docs, SDK snippets, and quickstart guides0stars
6coderifts avatarApi Governancecoderifts/api-governanceSigned, offline-verifiable contract-change authorization. Only a granted change can proceed.0stars