HTTP Header Policy Check — HSTS, CSP & Frame Declarations for VS Code
io.github.kriton-dev/http-security-headers
Check seven declared HTTP security header families without returning raw values
client:VS Code
transport:streamable-http
Install HTTP Header Policy Check — HSTS, CSP & Frame Declarations in VS Code
.vscode/mcp.json
{
"servers": {
"http-security-headers": {
"type": "http",
"url": "https://mcp.apify.com/?tools=hermeskd/http-security-headers"
}
}
}
Requires agent mode. MCP: Open User Configuration puts the same block in every workspace. VS Code docs