HTTP headers
Follow redirects and grade the security headers on a public URL.
Fetches a public URL
Use from your agent
Streamable HTTP at https://benchline.fabwaseem.com/mcp. No key. The tool name is check_http_headers.
mcp.jsonjson
1{
2 "mcpServers": {
3 "benchline": {
4 "url": "https://benchline.fabwaseem.com/mcp"
5 }
6 }
7}
tools/calljson
1{
2 "jsonrpc": "2.0",
3 "id": 1,
4 "method": "tools/call",
5 "params": {
6 "name": "check_http_headers",
7 "arguments": {
8 "url": "https://example.com/file"
9 }
10 }
11}
Related tools
- SSL checkerExpiry, names, and the chain for a certificate on port 443.TLSMCPNew
- CSP builderBuild a Content-Security-Policy and a Next.js headers snippet.HeadersMCPNew
- DNS lookupQuery A, AAAA, MX, TXT, CNAME, and CAA over DNS-over-HTTPS.DNSMCPNew
- Meta tags inspectorRead title, description, canonical, robots, Open Graph, Twitter, and JSON-LD types from one public URL.Social previewsMCPNew
How it works
Free HTTP header checker. Fetch a public URL, list the redirect chain, and grade HSTS, Content-Security-Policy, framing, nosniff, and Referrer-Policy. Private addresses are refused. The body is discarded.
- 01
Enter a public URL
A bare domain is treated as HTTPS. Local and private addresses are refused.
- 02
Read the chain
Each redirect shows the status and the location it pointed at.
- 03
Read the grade
The checklist names the header that passed, warned, or failed.