{"id":566751,"recorded_at":"2026-10-27T22:02:02.374357Z","observed_at":"2026-10-27T22:02:02.374284Z","subject_kind":"endpoint","subject":"8bedd339-432b-45ad-800c-635fc41a358f","kind":"mcp.tools","method":"probe.mcp/1","body":{"count":1,"tools":[{"description":"Scan the HTTP security headers of a public website. Returns a 0–100 score and A+–F grade (HTTPS 10, HSTS 15, CSP 25, framing 10, X-Content-Type-Options 10, Referrer-Policy 10, Permissions-Policy 5, COOP 5, CORP 5, cookies 5, minus up to 5 for version-leak headers; without HTTPS the score is capped at 39), each header's status and notes, recommended fix headers, and a link to the full report with copy-paste snippets for nginx, Apache, Cloudflare, Netlify, Vercel and Express. Read-only: it sends ordinary GET requests to the site (following up to 10 redirects, each safety-checked) and never reads page bodies. Same engine and scoring as the HeaderGuard JSON API (GET /api/scan).","inputSchema":{"additionalProperties":false,"properties":{"include_raw":{"default":false,"description":"Also return the full /api/scan JSON (redirect chain, all response headers with cookie values redacted, per-platform fix snippets) in structuredContent.raw. Larger output.","type":"boolean"},"url":{"description":"URL or bare domain to scan, e.g. example.com or https://example.com/login. A bare domain is scanned as https://<domain>/ (plain HTTP if HTTPS does not answer).","maxLength":2048,"minLength":1,"type":"string"}},"required":["url"],"type":"object"},"name":"scan_headers"}]},"body_sha256":"8d966109109aeefaeee345cb6584125fa58dfcc1bc609e61609fe3a5e7a98831","prev_id":null,"leaf":"0xb3198b91b9830452343c11fa19ead31ba7ffa4e4f04ab7660f78c29e7eba3a8c","leaf_text":"{\"body\":\"8d966109109aeefaeee345cb6584125fa58dfcc1bc609e61609fe3a5e7a98831\",\"id\":566751,\"kind\":\"mcp.tools\",\"method\":\"probe.mcp/1\",\"observed_us\":1793138522374284,\"prev\":null,\"subject\":\"8bedd339-432b-45ad-800c-635fc41a358f\",\"subject_kind\":\"endpoint\"}","day":{"day":"2026-10-27","leaves":273461,"root":"0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795","chained":"0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4","anchor_chain":"eip155:5042002","anchor_tx":"0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4","anchor_block":69414147},"proof":["0xb3196a961d53693b64eb9e51b91b99ee67328b0a9efc337092dee39b04164d8a","0x44f60bc87039e8e65cb8739ed0aab6db858a5dd4644102156022af6fa786d202","0xc1480e17add1ac3f4db9d95c65237e2345f3b1f0dea0dc12cffaaa22618aeaaa","0x7c938ce2604f3ac66f15b65f8a117cbb93585a6cb2035f70fee8fa3016eda8f5","0xc4b2be017890f815f6c98607a49b82b561a0337981ef877a7fc8179c0929242d","0xce72d3a17fa1592f113bab29a6caac2fa3e4ed5945112ef80568431bffc7ef02","0x40d99bf01d95f2a13f9e20142a7b88fd2621bb3a190320479589e848c0724fb1","0x645d7f4fa97e210040753e84b7e7a73ed234880790f79ff0ffd555b23d78ef5b","0x66641a5de5773f191ee4c359122b78665def3f4c25f20287284b8f42f36b6e7f","0x70e1a807254d3ffa88dc48fdd8a48e01352e196a3337a1b38bc0fb82b21b0c40","0x86028923d07588db14494db8e3f5477d37f29bebfab3475069528bce48c5f3c8","0x305c0e886bebb6df8123db384ccd0d5bfc3ddf1de5fbf4edca0aea32f7e223a0","0xf1104ea7df082465ff9df25ed29be80a0ac7c1c6b25c289b5d2e6ae5e6331952","0x87cb8935612c40b569de008a9bf8218cd24a06f74a7364a1654613d972fe00ed","0xec7bb68216a4deb1960acfbbd75da88f7e468b58adb9cf3ec62f2790e46508b3","0x64c405a28e8819716221eb2529fe4ce277ab08025e17e685cbd5ece75ceb75c7","0xf30fddbf4811226c58e8f0daf36fddd79fc5f1356b592bb1d99a8061ddbabe66","0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197","0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699"]}