This tool is no longer present in the server's latest manifest. Showing the last observed version (server version 4.97.1).

http-headers

Inactive

Tool of The Stall

declared in 4.97.1

HTTP response headers inspector and security grader. Fetches headers from any public URL and evaluates OWASP-recommended security headers: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns raw headers, per-header security findings, overall grade (A–F), and actionable recommendations. Useful for web app security audits, CDN configuration verification, and compliance checks.

Parameters schema

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "properties": {
    "url": {
      "type": "string",
      "description": "Public HTTP/HTTPS URL to inspect. Redirects are followed."
    },
    "include_all_headers": {
      "type": "boolean",
      "description": "If true, return all response headers (not just security-relevant ones). Default: false."
    }
  },
  "additionalProperties": false
}

What this tool wraps· 1 endpoint

min confidence0.70 0.50

Data resourceYouTube Data API
Google · media
name mention0.60

Parent server

The Stall

1/7 registries

View full server →