Security Headers Check

Grade the HTTP security headers of any website. No signup required.

Prerequisites

• Playwright MCP (comes with Claude Code)

Trigger

• "Check security headers on https://..."
• "Security headers scan mysite.com"
• "Is my site missing any security headers?"

Workflow

1. Navigate to the URL using mcp__playwright__browser_navigate
2. Capture network response headers using mcp__playwright__browser_network_requests
3. Check each header category below against the captured response headers