Claude MarketplacesSubmit
br0ski777 avatar

HTTP Headers Analyzer API

br0ski777/http-headers-x402

Analyzes HTTP response headers from any URL and returns structured security data: CSP, HSTS, X-Frame-Options, and other protection headers, plus cache directives and server fingerprinting. Exposes a single tool that fetches a page and parses the headers into categorized findings. Operates over SSE transport and integrates x402 micropayments, meaning each analysis call costs a small amount. Useful when you need to audit header configurations across multiple domains, check if security policies are properly set, or automate reconnaissance tasks that would otherwise require manual curl inspection. The hosted API endpoint means no local dependencies beyond the MCP connection.

tool
1
transport
SSE
last updated
May 16, 2026
View on GitHub

Tools

1 tools

Public tool metadata for what this MCP can expose to an agent.

network_analyze_headersUse this when you need to analyze HTTP response headers of a URL for security and configuration. Returns a full header audit in JSON. Returns: 1. allHeaders (raw key-value map) 2. securityScore (0-101 params

Use this when you need to analyze HTTP response headers of a URL for security and configuration. Returns a full header audit in JSON. Returns: 1. allHeaders (raw key-value map) 2. securityScore (0-10

Parameters* required
urlstring
Full URL to analyze (e.g. https://example.com)

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Readme

HTTP Headers Analyzer API

MCP Server x402 License: MIT

Analyze HTTP response headers -- security score, HSTS/CSP check, server detection, caching config. Score 0-100. Pay-per-call via x402 (USDC on Base L2) -- no API key, no signup, no rate-limit wall.

Part of the klymax402 marketplace -- 100 x402 micropayment APIs for AI agents, one wallet, USDC on Base.

Quickstart -- MCP

Add to your MCP client config (Claude Desktop, Cursor, ElizaOS, etc.):

{
  "mcpServers": {
    "http-headers": {
      "url": "https://http-headers.api.klymax402.com/mcp"
    }
  }
}

Quickstart -- HTTP (x402)

curl -X POST "https://http-headers.api.klymax402.com/api/analyze" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}'
# -> 402 Payment Required, with an x402 payment challenge in the response body

View the full README on GitHub

Details

Repository
github.com/br0ski777/http-headers-x402
Website
github.com/Br0ski777/http-headers-x402
Category
Security & Pentesting
Transport
SSE
Registry
MCP registry, active

More from br0ski777

Related Security & Pentesting MCP servers

View all
1clerk avatarClerkio.github.clerk/mcp-serverAccess Clerk authentication docs, SDK snippets, and quickstart guides0stars
2coderifts avatarApi Governancecoderifts/api-governanceSigned, offline-verifiable contract-change authorization. Only a granted change can proceed.0stars
3dainidude avatarPreflightdainidude/preflight-x402Pay-per-call smart-contract security: scans, tx simulation, and token risk via x402 (USDC on Base).0stars
4easysend-co avatarEasysendeasysend-co/easysend-mcpEasySend file sharing MCP server - upload, download and share files. No authentication required.0stars
5evozim avatarAegis Policyio.github.evozim/aegis-policyGovernance firewall and safety guardrails oracle for AI swarms.0stars
6fernsugi avatarX402 Apifernsugi/x402-api-mcp-serverEight paid DeFi tools: prices, gas, swaps, token security, holders, yields, funding and wallets0stars