# EverThread MCP server

> Performs plain-English website security audits covering certificates, headers, scripts, forms, and spam detection.

- Repository: https://github.com/PB-Digital-LLC/everthread-cli
- Page: https://hostedmcp.org/servers/pb-digital-llc/everthread-cli
- Transport: stdio
- Stars: 0
- License: MIT
- Latest version: 0.1.3

## Install

### Claude Code

```sh
claude mcp add everthread-cli -- npx -y everthread
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "everthread-cli": {
      "command": "npx",
      "args": [
        "-y",
        "everthread"
      ]
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "everthread-cli": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "everthread"
      ]
    }
  }
}
```

### VS Code CLI

```sh
code --add-mcp '{"name":"everthread-cli","type":"stdio","command":"npx","args":["-y","everthread"]}'
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "everthread-cli": {
      "command": "npx",
      "args": [
        "-y",
        "everthread"
      ]
    }
  }
}
```

### Codex

```sh
codex mcp add everthread-cli -- npx -y everthread
```

### Codex config.toml (`~/.codex/config.toml`)

```toml
[mcp_servers.everthread-cli]
command = "npx"
args = ["-y", "everthread"]
```

### Gemini CLI

```sh
gemini mcp add -s user everthread-cli npx -- -y everthread
```

### Gemini settings.json (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "everthread-cli": {
      "command": "npx",
      "args": [
        "-y",
        "everthread"
      ]
    }
  }
}
```

## FAQ

### Does EverThread require an API key?

No, the service is free and does not require a key for observation.

### Can I use EverThread in a CI/CD pipeline?

Yes, you can use the --fail-on flag to trigger failures in CI steps based on urgent or attention-required findings.

### What specific security elements does it check?

It examines certificates, security headers, scripts, forms, frames, redirects, and specific well-known files.

### Does EverThread perform active penetration testing?

No, it only performs observation and does not log in, probe for hidden paths, or run exploit tools.