Performs plain-English website security audits covering certificates, headers, scripts, forms, and spam detection.
Auch bekannt als PB-Digital-LLC/everthread-cli, everthread-cli
- Stars
- 0
- Tools
- —
- Downloads, 30 Tage
- —
- Neueste Version
- 0.1.3
- Letzter Commit
- 27. Sept. 2026
- Lizenz
- MIT
Was ist EverThread MCP?
EverThread ist ein MCP server. Performs plain-English website security audits covering certificates, headers, scripts, forms, and spam detection.
Zusammenfassung generiert aus dem README des Projekts
Über EverThread MCP server
EverThread provides website security audits that translate technical vulnerabilities into plain English. It analyzes a site by loading the homepage like a browser to inspect SSL certificates, security headers, scripts, forms, frames, and redirects. This tool is designed for observation only and does not perform active probing, login attempts, or exploit testing. It is free to use and requires no API keys for standard checks.
Developers can integrate this server into MCP clients like Claude Desktop, Claude Code, or Cursor using the npx command. The server provides three specific tools: check_site, explain_finding, and list_findings. It operates with a limit of one fresh check per site every week, though users can access stored results within that timeframe. For automated workflows, the CLI supports a JSON output mode and a flag to fail CI steps when urgent issues are detected.
Was du damit machen kannst
- 1Interpreting complex security vulnerabilitiesAsk an AI client to provide a human-readable explanation for a specific technical finding like an expiring TLS certificate.
- 2Performing periodic website health checksRun a security scan on a domain to check for missing security headers or insecure connection fallbacks.
Geschrieben aus dem README des Projekts. Jeder Use Case wurde gegen ein Zitat daraus geprüft.
So installierst du EverThread MCP
Formate geprüft am 10. Nov. 2026Zu Cursor hinzufügenZu Goose hinzufügenEverThread MCP in Claude Code installieren
$ claude mcp add everthread-cli -- npx -y everthreadEverThread MCP in Cursor installieren
~/.cursor/mcp.json
{
"mcpServers": {
"everthread-cli": {
"command": "npx",
"args": [
"-y",
"everthread"
]
}
}
}EverThread MCP in VS Code installieren
.vscode/mcp.json
{
"servers": {
"everthread-cli": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"everthread"
]
}
}
}EverThread MCP in VS Code CLI installieren
$ code --add-mcp '{"name":"everthread-cli","type":"stdio","command":"npx","args":["-y","everthread"]}'EverThread MCP in Claude Desktop installieren
claude_desktop_config.json
{
"mcpServers": {
"everthread-cli": {
"command": "npx",
"args": [
"-y",
"everthread"
]
}
}
}EverThread MCP in Codex installieren
$ codex mcp add everthread-cli -- npx -y everthreadEverThread MCP in Codex config.toml installieren
~/.codex/config.toml
[mcp_servers.everthread-cli] command = "npx" args = ["-y", "everthread"]
EverThread MCP in Gemini CLI installieren
$ gemini mcp add -s user everthread-cli npx -- -y everthreadEverThread MCP in Gemini settings.json installieren
~/.gemini/settings.json
{
"mcpServers": {
"everthread-cli": {
"command": "npx",
"args": [
"-y",
"everthread"
]
}
}
}Automatisierte Checks
Geluften am 15. Nov. 2026Vollständiger Bericht →Unsere automatisierten Checks bestanden. Das ist kein Security-Audit: Lies den Code und gib dem Server nur den minimal notwendigen Zugriff. Wie die Checks funktionieren
- Source Repository verknüpft und erreichbarpb-digital-llc/everthread-cli is public and reachablegithub.com/pb-digital-llc/everthread-cli ↗Bestanden
- Paket nennt dieses Repository als Quelleeverthread names pb-digital-llc/everthread-cli as sourcenpmjs.com/package/everthread ↗Bestanden
- Build-Provenienz (Sigstore-Attestierung)No build attestation published for this releaseNicht geprüft
- Open Source Lizenz (OSI)MITspdx.org/licenses/MIT.html ↗Bestanden
- Commit oder Release im letzten JahrLast commit or release 2026-09-27github.com/pb-digital-llc/everthread-cli ↗Bestanden
- OpenSSF ScorecardNicht geprüft
- Package-Name ähnelt keinem populären PackageNo popular package one edit away from everthreadBestanden
- Keine kritischen Advisories im Paket oder seinen Abhängigkeiten99 resolved dependencies checked; no critical advisoryosv.dev ↗Bestanden
- Keine versteckten Anweisungen an das Modell0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersBestanden
- Destruktive Tools sind markiertNicht geprüft
- Remote-Endpoint beantwortet den MCP-HandshakeNicht geprüft
README
Auf GitHub anseheneverthread
A website security check that explains itself in plain English. Free, no key, observation only.
npx everthread check yourbakery.com
EverThread · yourbakery.com
WORTH A LOOK Nothing alarming, but one thing is worth fixing.
FIX THIS WEEK Your site lets browsers fall back to an insecure connection
The Strict-Transport-Security header is not being sent. ...
Fix: Send the technical line below to whoever runs your site. ...
- One fresh check per site per week. Inside that week you get the stored result, its age, and a note about daily watching.
--jsonfor machines,--fail-on urgent(orattention) to fail a CI step.everthread explain tls.expiringandeverthread findingsfor the explanations behind every finding.
As an MCP server
{ "mcpServers": { "everthread": { "command": "npx", "args": ["-y", "everthread", "mcp"] } } }
Tools: check_site, explain_finding, list_findings. Works with Claude Code, Claude Desktop, Cursor, and anything else that speaks MCP.
What it does and doesn't do
It loads the home page the way a browser does and reads the certificate, security headers, scripts, forms, frames, redirects, a fixed handful of well-known files, and the page text. It never logs in, probes for hidden paths, or runs exploit tooling. Public results withhold the exact address of an exposed file; the site owner sees it after signing up. Only check sites you own or have permission to check.
Docs: https://everthread.live/api · Every finding explained: https://everthread.live/fix/
EverThread MCP Fragen
Wie füge ich EverThread MCP zu Claude Code hinzu?
Führe claude mcp add everthread-cli -- npx -y everthread in deinem Terminal aus. Füge --scope user hinzu, damit der Server in jedem Projekt verfügbar ist.
Wie füge ich EverThread MCP zu Cursor hinzu?
Öffne ~/.cursor/mcp.json und füge den Server unter mcpServers hinzu, mit der Cursor-Config aus dem Installationsabschnitt oben.
Does EverThread require an API key?
No, the service is free and does not require a key for observation.
Can I use EverThread in a CI/CD pipeline?
Yes, you can use the --fail-on flag to trigger failures in CI steps based on urgent or attention-required findings.
What specific security elements does it check?
It examines certificates, security headers, scripts, forms, frames, redirects, and specific well-known files.
Does EverThread perform active penetration testing?
No, it only performs observation and does not log in, probe for hidden paths, or run exploit tools.