Mcp Server Security Audit
Run website security scans for vulnerabilities, HTTP headers, TLS, and email security before you expose a new app to the internet.
Overview
io.github.joepangallo/mcp-server-security-audit is an MCP server for the Ship phase that scans websites for vulnerabilities, headers, TLS, and email security through your agent.
What is this MCP server?
- Scan websites for common security vulnerabilities
- Evaluate HTTP security headers and TLS configuration
- Check email-related security settings on domains
- Stdio MCP package mcp-server-security-audit v1.0.3 via npm
- Agent-driven pre-ship audits without a separate pentest GUI
- Server version 1.0.3
- Audit scope includes vulnerabilities, headers, TLS, and email security per description
- Single stdio npm MCP package mcp-server-security-audit
What problem does it solve?
You are about to ship a public URL but lack a fast, repeatable way to verify headers, TLS, and obvious vulnerabilities without hiring a consultant.
Who is it for?
Solo builders launching web apps who want MCP-driven security baselines on each deploy.
Skip if: Organizations needing formal compliance attestations or deep manual pentests on regulated workloads.
What do I get? / Deliverables
Your agent can trigger security audits and return actionable configuration findings before you call the release done.
- Agent-generated security audit summaries for target sites
- Header, TLS, and email-security findings for remediation
- Repeatable pre-ship security checklist invocations
Recommended MCP Servers
Journey fit
How it compares
MCP security scanner integration, not a CI-native SAST/DAST platform or WAF product.
Common Questions / FAQ
Who is mcp-server-security-audit for?
Builders shipping websites or APIs who want Claude Code, Cursor, or similar agents to run vulnerability and configuration scans via MCP.
When should I use mcp-server-security-audit?
Use it in Ship before launch or after infrastructure changes when you need header, TLS, email security, and vulnerability checks on a live URL.
How do I add mcp-server-security-audit to my agent?
Install npm package mcp-server-security-audit, configure stdio MCP in your agent, and follow joepangallo/agent-audit for target URLs and any required settings.