SiteGuardian
EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.
Open source Repository Open in the app JSON README (API)
About
EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.
Details
- Kind
- MCP servers
- Topic
- Cloud & DevOps
- Publisher
- gweber
- Origin
- official
- Category
- ferramentas
- Transport
- http
- Version
- 1.0.0
- Last push
- 2026-04-25T14:00:57Z
- Repository state
- ativo
- Language
- Shell
- License
- MIT
- Added
- 2026-08-29 03:02:56
- Updated
- 2026-08-29 03:02:56
- Origin id
io.github.gweber/siteguardian
README
# SiteGuardian MCP — Examples & Client Configurations
[](https://modelcontextprotocol.io)
[](https://siteguardian.io)
[](https://siteguardian.io/docs/mcp)
Client configurations, copy-paste examples, and the MCP server manifest for the **SiteGuardian** Model Context Protocol server.
> **Note:** This repository contains examples and client integration code only. The MCP server itself is hosted at **https://mcp.siteguardian.io** and is operated as a SaaS — server source is closed. Everything in this repo is MIT-licensed and free to fork.
## What is the SiteGuardian MCP server?
A hosted MCP endpoint that lets Claude Desktop, Claude Code, Cursor, Windsurf, and VS Code Copilot query website-monitoring data and run security/compliance scans through natural-language tool calls.
- **Endpoint:** `https://mcp.siteguardian.io` (or the canonical `https://siteguardian.io/mcp`)
- **Transport:** Streamable HTTP
- **Hosting:** Hetzner, Germany — EU data residency
- **Documentation:** https://siteguardian.io/docs/mcp
## Five tools
| Tool | Auth | Purpose |
|---|---|---|
| `scan_domain` | anonymous | One-off security scan, A–F grade + top 3 issues + permalink |
| `list_monitored_domains` | Bearer | Domains under continuous monitoring for the account |
| `get_domain_status` | Bearer | Current grade + active issues for a monitored domain |
| `get_drift_events` | Bearer | Recent posture changes (TLS, DNSSEC, headers, cookies, JS hosts) |
| `get_fix_recommendations` | Bearer + paid plan | nginx/Apache/DNS snippets + verify commands |
## Try the anonymous tool (no setup required)
```bash
curl -X POST https://mcp.siteguardian.io/ \
-H 'Content-Type: application/json' \
-H 'Accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"scan_domain","arguments":{"domain":"example.com"}}}'
```
Rate-limited to 10 calls/hour/IP. Cached for 2h per domain. Full curl/Python/JS examples in [`examples/`](examples/).
## Install in your client
All clients use the same endpoint. Copy-paste configs in [`clients/`](clients/):
- **Claude Desktop** — [`clients/claude-desktop.json`](clients/claude-desktop.json)
- **Claude Code (CLI)** — [`clients/claude-code.sh`](clients/claude-code.sh)
- **Cursor** — [`clients/cursor.json`](clients/cursor.json)
- **Windsurf** — [`clients/windsurf.json`](clients/windsurf.json)
- **VS Code / Copilot** — [`clients/vscode.sh`](clients/vscode.sh)
## Authentication
The `scan_domain` tool is **anonymous**. The four monitoring tools require a Bearer key:
1. Sign in at https://siteguardian.io
2. Open **Settings → API & Integrations**
3. Click **Generate key**, name it, copy it
4. Add to your client config:
```json
"headers": {"Authorization": "Bearer sg_live_..."}
```
API keys are available on the Monitor, Compliance, and Enterprise plans.
## Privacy
- **EU-hosted.** Hetzner Germany. No US sub-processor.
- **No LLM in the response path.** Tool answers are deterministic from monitoring data.
- **No training on your queries.** Logged for abuse prevention and billing only.
- **Audit trail.** Every tool call is recorded in the SHA-256 hash chain.
## Server manifest
The full machine-readable MCP server manifest is in [`server.json`](server.json) — this is the file consumed by the Anthropic MCP Registry and the various community directories.
## Roadmap
- [ ] OAuth 2.1 (per current MCP spec)
- [ ] `resources` and `prompts` in addition to `tools`
- [ ] Listing in the official Anthropic MCP Registry
- [ ] Listing on Smithery and mcp.so
## License
Examples and client configurations in this repository are released under the MIT License — see [`LICENSE`](LICENSE).
The SiteGuardian MCP server itself is proprietary and hosted as a SaaS. Server source is not distributed.
## Support
- **Documentation:** https://siteguardian.io/docs/mcp
- **Status:** https://siteguardian.io/status
- **Bug or feature request:** [open an issue](../../issues) or email support@siteguardian.io