MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
MCP server: parse and stringify HTTP header blocks.
MIT -
Analyze and score HTTP security headers (CSP, HSTS, CORS, cookies) with actionable fix recommendations. Free MCP server — A+ to F grading for any URL. Built by Shakil Ahamed.
-
The open-source Enterprise API client in your browser. Team Collaboration. Browser Interceptor - modify live traffic.
Apache-2.0 ★ 63 -
MCP Server with tool that returns all headers send to the server
MIT ★ 1 -
Autonomous HTTP Security Headers & RFC 9116 Vulnerability Disclosure Auditor MCP Server
MIT -
MCP server for Website Security Snapshot API — scan HTTP security headers from Claude and AI agents
npm MIT -
HTTP security headers scanner API + MCP server: HSTS, CSP, framing, COOP/CORP and cookies, with a score and fix snippets.
MIT -
site-doctorgithub.com/subhro-kar/site-doctorupdated this year
Audit rendered websites for broken links, images, accessibility, SEO, security headers, and more. CLI + MCP server for AI agents.
npm MIT -
posturecheck-mcpgithub.com/mvg777/posturecheck-mcpupdated this year
MCP server for domain security checks — SPF, DKIM, DMARC, MTA-STS, TLS certificates and protocol support, and HTTP security headers.
npm MIT -
Security help for defenders: grade your site's security headers (fixes + README badge) and read logs/code to find what happened. Claude Code plugin, MCP server, no install.
MIT ★ 1 -
Free passive security scanning for AI agents. Check any domain for email spoofing (DMARC/SPF/DKIM), TLS, security headers, exposed files, and subdomain takeover risk — using public information only, no intrusive probing.
npm MIT -
Free MCP server for security operations: CVSS 3.1 scoring, IOC extraction and defanging, email header triage, hash and JWT decoding, timestamps, layered decoding, CISA KEV lookup. No account, no telemetry.
MIT -
Check a site is ready before you share the link. Link previews for LinkedIn, X, Slack, iMessage and Discord, SPA refresh 404s, security headers, favicons, noindex left on. MCP server and CLI, no API key.
npm MIT -
MCP server for API Change Monitor. Watch the APIs you depend on and get only what changed since the last run: changelog entries tagged as deprecations or breaking changes, status incidents, OpenAPI diffs, and Sunset headers. Runs on Apify.
MIT -
Free self-hosted OSINT investigator's toolkit with an MCP server for Claude Code and Claude Desktop. 19 tools in one interface: crypto tracing, phishing fingerprinting and hunting, attack surface, route map, domain intel, Telegram OSINT, IP reputation, email header forensics, username enumeration, HIBP breach checks, ransomware tracking. AGPL-3.0.
AGPL-3.0 ★ 16 -
Local balance reconciliation and export-header review for Bank File Tool workflows
MIT -
Local-first MCP server for web auditing — axe-core, Playwright, security headers
AGPL-3.0 -
security-scanner-ai-mcpgithub.com/csoai-org/security-scanner-ai-mcpupdated this year
Security Scanner Ai automation via MCP. Includes scan dependencies, check headers, scan secrets. By MEOK AI Labs.
npm MIT -
MCP server: parse and stringify CSV (RFC 4180). Header rows, quoting, custom delimiters.
MIT -
MsgLensno update data
Read Outlook .msg, .eml and winmail.dat files locally: headers, body and attachments. Recovers bodies stored only as compressed RTF. Nothing is uploaded.
smithery -
cybersecurity-ai-mcpgithub.com/csoai-org/cybersecurity-ai-mcpupdated this year
Cybersecurity Ai MCP server. Tools: classify vulnerability, lookup cve, check security headers. Built by MEOK AI Labs.
pypi MIT License -
mcp-inspector-gemini-cligithub.com/debjotyms/mcp-inspector-gemini-cliupdated this year
A lightweight MCP server for web inspection. Includes tools for fetching HTTP headers and performing DNS lookups.
MIT -
webrecongithub.com/cognis-digital/webreconupdated this year
Fingerprint web tech/CMS/frameworks from headers + body
NOASSERTION -
@mukundakatta/jwt-mcpgithub.com/mukundakatta/jwt-mcpupdated this year
MCP server: decode JWT to inspect header and claims (no verification).
npm MIT -
Drop-in WebFetch MCP with domain-scoped HTTP header injection for auth
MIT ★ 2 -
corsauditgithub.com/cognis-digital/corsauditupdated this year
Detect permissive/misconfigured CORS from headers or a config
NOASSERTION -
api-tester-ai-mcpgithub.com/csoai-org/api-tester-ai-mcpupdated this year
MCP server for api tester ai. Features send request, validate response, check headers. From MEOK AI Labs.
npm MIT -
@mukundakatta/csv-mcpgithub.com/mukundakatta/csv-mcpupdated this year
MCP server: parse and stringify CSV (RFC 4180). Header rows, quoting, custom delimiters.
npm MIT -
seosiri-dns-sec-audit-mcpgithub.com/seosiri-official/dns-sec-audit-mcpupdated this year
A sovereign, local-first MCP server for Technical SEO DNS record auditing, SOA health checks, SSL/TLS inspection, and HTTP security header analysis.
pypi MIT -
Letterhead PDF as digital stationery: prints Markdown without overprinting header, footer, or logo.
MIT ★ 1 -
MCP server for local security work — secrets, CVEs, Wi‑Fi/ARP/USB, header audits.
MIT -
Any Excel, any headers → 19 canonical fields → clean JSON. Works offline, LLM-enhanced, MCP server included.
MIT ★ 1 -
Check a domain's DNS and propagation, email security (SPF, DMARC, DKIM, MTA-STS), RDAP registration, TLS certificate and HTTP headers
Apache-2.0 -
csv-tools-ai-mcpgithub.com/csoai-org/csv-tools-ai-mcpupdated this year
AI-powered csv tools ai MCP server for agents. Supports parse csv, validate headers, detect delimiter. By MEOK AI Labs.
npm MIT -
headerscangithub.com/cognis-digital/headerscanupdated this year
Grade HTTP security headers (CSP/HSTS/XFO) A-F from a response dump
NOASSERTION -
json-to-csv-convertergithub.com/dancvv/json-to-csv-converterupdated this year
Zed MCP extension: JSON to CSV/Excel and CSV to JSON, with automatic delimiter/encoding/header detection, streaming, progress, row limits, and cancellation
MIT -
MCP server for HTTP — structured request/response data with headers and status for AI agents
npm MIT -
通用多邮箱 MCP 服务：原生 Streamable HTTP，固定 5 个工具，支持 IMAP/SMTP、Gmail API、多账号切换及 Env/Header 配置。
ISC ★ 17 -
sentinel-mcpgithub.com/kareew/sentinel-mcpupdated this year
Security Operations MCP Server — turns AI agents into security analysts. HTTP headers, SSL/TLS, DNS, port scanning, tech fingerprinting, and full reports with MITRE ATT&CK mapping.
★ 1 -
Publicly reachable Model Context Protocol (MCP) server built with FastAPI for solving HTTP header-based exam challenges via JSON-RPC 2.0.
-
DotSignal for ChatGPT — Cloud events from Feishu messages, tasks, calendars and NetEase email headers, so ChatGPT Dot can remind you to reply, decide and follow up.
MIT -
MCP server for PhishClean security tools — check URLs for phishing, analyse email headers, decode JWTs, scan code for leaked secrets. Works with Claude Desktop, Claude Code, Cursor.
MIT -
MCP server for PhishClean security analysis tools — check URLs, passwords, emails, headers, JWTs, and source code for security issues
npm MIT -
mcp-http-inspectgithub.com/jeffereychown-Max/mcp-http-inspectupdated this year
5 HTTP/REST debugging tools for Claude: request (safe-by-default), compare responses, inspect CORS, decode JWT from Authorization header, explain status codes. Free, MIT.
MIT -
posturecheck-mcpgithub.com/mvg777/posturecheck-mcpupdated this year
posturecheck-mcp — Domain security checks: SPF, DKIM, DMARC, MTA-STS, TLS certificates and protocol support, and HTTP security headers. No API key.
-
Is my site healthy? TLS, DNS, HTTP, security headers, ports and email DNS (SPF/DMARC) checks over MCP, with an SSRF guard that refuses internal addresses. Hand-written DNS resolver, stdlib only.
MIT -
@theyahia/ileti-merkezi-mcpgithub.com/theyahia/ileti-merkezi-mcpupdated this year
Type-safe MCP server for the İletiMerkezi SMS API (Turkey) — send SMS/OTP, bulk, delivery reports, sender headers, blacklist, İYS consent
npm MIT -
@junis/wms-junis-mcpactive
Read-only MCP server for a WMS stock OpenAPI (POST /api/Stock/GetStockInformation with an ApiKey header): available stock per item and lot, added up over several warehouses
npm MIT -
gguf-mcpgithub.com/arose26/gguf-mcpupdated this year
MCP server that inspects local GGUF and safetensors model files — architecture, quantization, parameters, tensors, and VRAM-fit estimates from headers only, without loading the model
npm MIT -
@leviai/netrecon-mcpgithub.com/levi-labs/netrecon-mcpupdated this year
Network reconnaissance MCP server — DNS, WHOIS, port scanning, subdomain enumeration, TLS inspection, HTTP security headers, IP geolocation, and Shodan InternetDB. Zero API keys required.
npm MIT -
mcp-api-toolsgithub.com/rog0x/mcp-api-toolsupdated this year
MCP server for API testing: HTTP requests, endpoint health checks, JWT decode, URL parsing, security header analysis Install: npx @rog0x/mcp-api-tools
MIT -
webhookcannon-mcpgithub.com/marilynceo/webhookcannon-mcpupdated this year
Receive, inspect, replay, and forward webhooks u2014 from your AI agent. Capture any webhook payload, inspect headers + body, replay to modified URLs, and build integration tests u2014 all without ngrok, RequestBin, or webhook.site.
-
network-mcpgithub.com/patrikx3/network-mcpupdated this year
Free AI-powered network analysis MCP server — DNS, SSL, security headers, email auth, WHOIS, monitoring & status pages. Works with Claude Code, Codex, and any MCP client.
MIT ★ 1 -
A sovereign, local-first MCP server for Technical SEO DNS record auditing, SOA health checks, SSL/TLS inspection, and HTTP security header analysis.
MIT -
This project is a Model Context Protocol (MCP) server that reports auth information about the current request. It parses the Authorization header as JWT and reports some decoded payload items from the JWT. The name is inspired by the `whoami` coreutils pa
npm MIT -
netlens-mcpgithub.com/pzalutski-pixel/netlens-mcpupdated this year
Zero-dependency MCP server for unobstructed web reading: direct browser-header fetch past robots.txt/bot blocks, full-page HTML->Markdown with ad/boilerplate stripping, plus web search
pypi Apache-2.0 -
mcp-cache-toolsgithub.com/rog0x/mcp-cache-toolsupdated this year
MCP server #30 for caching: HTTP cache header analyzer, cache key generator, LRU/LFU/TTL simulation, CDN detector, browser cache analyzer Install: npx @rog0x/mcp-cache-tools
NOASSERTION -
Read Outlook .msg, .eml and winmail.dat files in Node: headers, body (including bodies stored only as compressed RTF) and attachments. CLI, Node library and MCP server for AI assistants.
npm MIT -
Kagami 鏡 · a native macOS packet and flow viewer on Wireshark's dissectors: live capture, RFC header anatomy, NetFlow/IPFIX and nfdump, follow streams, a CLI and an MCP server.
AGPL-3.0 ★ 1 -
shieldnet-mcpgithub.com/hhhashexe/shieldnet-mcpupdated this year
ShieldNet Security Scanner — MCP Server for AI Agent Security Governance. Scans URLs for XSS, SQLi, SSTI, CORS misconfig, missing headers, info disclosure, and more. Returns ALLOW/WARN/BLOCK governance decisions.
npm MIT