exposureguard-mcp

Name: exposureguard-mcp
Author: exposureguard

ExposureGuard is a domain security scanning platform that grades any domain A through F based on 8 automated checks: SPF, DMARC, SSL/TLS, HTTPS redirect, security headers, DNSSEC, open ports, and MX records. This MCP server exposes 4 tools for AI agents to scan domains, retrieve cached grades, get copy-paste remediation fixes, and discover third-party supply chain dependencies. Built for security teams, DevSecOps pipelines, and AI agents that need to vet domains before interacting with them.

该来源不提供完整文件导出（国内平台多为平台内托管），仅存元数据与原链

模型生成摘要（rules/v1 · 2026-09-27 16:42）：ExposureGuard is a domain security scanning platform that grades any domain A through F based on 8 automated checks: SPF…
这是模型对公开材料的总结，不是官方声明，请以原链内容为准。

接入信息

传输形态: http
鉴权方式: 鉴权未知
端点: https://exposureguard-mcp--exposureguard.run.tools

鉴权方式未标注，请核对官方文档后再接入——不要直接使用以下片段

{
  "mcpServers": {
    "exposureguard-mcp": {
      "url": "https://exposureguard-mcp--exposureguard.run.tools"
    }
  }
}

能力清单

工具	说明
scan_domain	Run a comprehensive 8-point security audit on any domain. Checks SPF (email spoofing prevention), DMARC (email authentication policy), SSL/TLS certificate validity, HTTPS redirect enforcement, security headers (X-Frame-Options, Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options), DNSSEC (DNS integrity), open ports (exposed services on 21/22/23/25/80/443/3306/3389/5432/8080/8443), and MX records. Returns a letter grade A through F, numeric score 0-100, detailed per-check findings with pass/fail status, and a shareable report URL. Takes approximately 8 seconds. Use this when you need a fresh, comprehensive security assessment of a domain before interacting with it.
get_grade	Retrieve the most recent cached security grade for a domain without triggering a new scan. Returns the letter grade (A-F), numeric score (0-100), and timestamp of when the grade was last calculated. Results may be up to 24 hours old. Use this for quick lookups when you need a fast answer and don't require the freshest data — returns in under 200ms compared to ~8s for a full scan.
get_remediation	Get actionable, copy-paste fix instructions for every failing security check on a domain. Returns specific DNS TXT records to add (SPF, DMARC), server configuration snippets (Nginx, Apache, Cloudflare) for security headers and HTTPS redirects, and step-by-step instructions for enabling DNSSEC. Each fix includes the exact record or config to apply and which provider/panel to use. Use this after a scan to give users concrete steps they can hand to their DNS provider or sysadmin.
get_dependencies	Discover all third-party scripts, stylesheets, fonts, images, and iframes loaded by a domain's website. Returns each external resource with its type (script/stylesheet/image/iframe), host, and full URL. Useful for supply-chain risk assessment — reveals what external services the domain depends on and could be compromised through. Also useful for compliance audits and understanding a domain's technology stack.

纠错与举报（发现条目失效、署名有误或涉及侵权？）

提交举报 / 纠错

侵权举报经核验成立后，我们会即时下线该条目并删除已存的内容副本。