Skip to content
mcp/harbor
Claude Desktop

HTTP Header Policy Check — HSTS, CSP & Frame Declarations for Claude Desktop

io.github.kriton-dev/http-security-headers

Check seven declared HTTP security header families without returning raw values

client:Claude Desktop transport:streamable-http

Install HTTP Header Policy Check — HSTS, CSP & Frame Declarations in Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json · windows: %APPDATA%\Claude\claude_desktop_config.json 

{
  "mcpServers": {
    "http-security-headers": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mcp.apify.com/?tools=hermeskd/http-security-headers"
      ]
    }
  }
}

Claude Desktop has no remote transport in its config file, so this bridges through mcp-remote. Restart the app after saving. Claude Desktop docs

HTTP Header Policy Check — HSTS, CSP & Frame Declarations in other clients

HTTP Header Policy Check — HSTS, CSP & Frame Declarations MCP server