SiteGuardian

gweber/siteguardian-mcp-examples

Connects Claude to SiteGuardian's EU-hosted monitoring API via streamable HTTP. Five tools: one anonymous scanner that grades any domain and returns top issues with a permalink, plus four authenticated tools that pull monitored domains, current status, drift events (TLS, headers, DNSSEC changes), and fix snippets for nginx, Apache, or DNS. The anonymous tool works immediately with no keys, rate-limited to 10 calls per hour. Bearer auth unlocks the monitoring tools if you're on a paid plan. Hosted on Hetzner Germany with audit logs. Reach for this when you want Claude to check site security posture or explain compliance gaps without leaving the conversation.

tools: 5
auth: Secret needed
transport: HTTP
last updated: Apr 25, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp https://mcp.siteguardian.io --name siteguardian --header 'Authorization: Bearer ${API_TOKEN}'

Run in your terminal. add-mcp asks which agents to add it to, then asks for each value it needs. Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http siteguardian https://mcp.siteguardian.io --header 'Authorization: YOUR_AUTHORIZATION'

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 5 tools

Verified live against the running server on Nov 6, 2026.

scan_domainRuns a free one-off security scan of the given domain and returns its grade (A–F), scan timestamp, and up to three top-priority issues with a permalink to the full report on siteguardian.io. Use this when the user asks for a quick security check of a domain that is NOT yet und...1 params

Runs a free one-off security scan of the given domain and returns its grade (A–F), scan timestamp, and up to three top-priority issues with a permalink to the full report on siteguardian.io. Use this when the user asks for a quick security check of a domain that is NOT yet und...

Parameters* required

domain*string

list_monitored_domainsReturns the full list of domains under continuous SiteGuardian monitoring for the authenticated account. Each entry includes the domain, current security grade (A–F), timestamp of the last completed scan, and a relative dashboard URL. Use this when the user asks what they are...

Returns the full list of domains under continuous SiteGuardian monitoring for the authenticated account. Each entry includes the domain, current security grade (A–F), timestamp of the last completed scan, and a relative dashboard URL. Use this when the user asks what they are...

No parameters. Call it with no arguments.

get_domain_statusReturns the current security grade (A–F), last-scan timestamp, and list of active issues for a domain that is ALREADY under SiteGuardian monitoring by the authenticated account. Each issue carries a stable id, a severity, a short title, and an impact description. The response...1 params

Returns the current security grade (A–F), last-scan timestamp, and list of active issues for a domain that is ALREADY under SiteGuardian monitoring by the authenticated account. Each issue carries a stable id, a severity, a short title, and an impact description. The response...

Parameters* required

domain*string

get_drift_eventsReturns recent configuration drift events for a domain under monitoring by the authenticated account — TLS changes, DNSSEC state changes, new or removed security headers, shifts in third-party JS hosts, new cookies. Each event carries its observed-at timestamp, a kind (tls/dns...3 params

Returns recent configuration drift events for a domain under monitoring by the authenticated account — TLS changes, DNSSEC state changes, new or removed security headers, shifts in third-party JS hosts, new cookies. Each event carries its observed-at timestamp, a kind (tls/dns...

Parameters* required

domain*string

limitinteger

default: 20

sincevalue

get_fix_recommendationsReturns copy-paste-ready fix recommendations (nginx, Apache, DNS, shell) for the issues found on a domain the caller has already paid for — either an active Monitor/Compliance subscription covering the domain, OR a purchased one-off Report for the domain. Each recommendation c...2 params

Returns copy-paste-ready fix recommendations (nginx, Apache, DNS, shell) for the issues found on a domain the caller has already paid for — either an active Monitor/Compliance subscription covering the domain, OR a purchased one-off Report for the domain. Each recommendation c...

Parameters* required

domain*string

issue_idvalue

Readme

SiteGuardian MCP — Examples & Client Configurations

Client configurations, copy-paste examples, and the MCP server manifest for the SiteGuardian Model Context Protocol server.

Note: This repository contains examples and client integration code only. The MCP server itself is hosted at https://mcp.siteguardian.io and is operated as a SaaS — server source is closed. Everything in this repo is MIT-licensed and free to fork.

What is the SiteGuardian MCP server?

A hosted MCP endpoint that lets Claude Desktop, Claude Code, Cursor, Windsurf, and VS Code Copilot query website-monitoring data and run security/compliance scans through natural-language tool calls.

View the full README on GitHub

Details

Repository: github.com/gweber/siteguardian-mcp-examples
Website: siteguardian.io/docs/mcp
Transport: HTTP
Auth: Required
Registry: MCP registry, active
Tools verified: Nov 6, 2026