Security Snapshot

What is Security Snapshot?

An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers — with automatic payment via the x402 protocol.

What it checks

• HSTS — HTTP Strict Transport Security
• CSP — Content Security Policy
• X-Frame-Options — Clickjacking protection
• X-Content-Type-Options — MIME sniffing protection
• Referrer-Policy — Referrer information control
• Permissions-Policy — Browser feature access control
• HTTPS enforcement and redirect chain depth
• Presence of security.txt, robots.txt, sitemap.xml

Payment model

• 0.05 USDC per scan, paid automatically on Base via the x402 protocol
• No API key, no account, no subscription required
• The agent's wallet pays directly — fully autonomous

Tools provided

Claude Desktop setup

{
  "mcpServers": {
    "security-snapshot": {
      "command": "npx",
      "args": ["-y", "mcp-server-security-snapshot"],
      "env": {
        "WALLET_PRIVATE_KEY": "0x...",
        "NETWORK": "base"
      }
    }
  }
}