Cursor HolicAudit website checks security_headers_check
How to: Cursor HolicAudit website checks security_headers_check
Add HolicAudit website checks to Cursor
-
01
Open ~/.cursor/mcp.json and merge this in. Keep any servers already there.
{
"mcpServers": {
"website-checks": {
"url": "https://audit.huutran.dev/mcp"
}
}
}-
02
Save the file and restart Cursor.
-
03
Ask for something security_headers_check does. Cursor lists the server's tools on connect and calls security_headers_check itself — you do not invoke it by name.
-
04
If nothing happens, check the server is running and that HolicAudit website checks's identifier in your config matches the one above exactly.
Use .cursor/mcp.json in a project root instead to scope it to that project. Cursor merges both. Cursor docs
Same tool, other clients
This list was read from the server itself, by connecting to it and calling tools/list on 10 November 2026. It is what
the server actually exposes, not what its listing claims.
Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.