`observatory_scan`

Pack: mozilla-observatory · Endpoint: https://gateway.pipeworx.io/mozilla-observatory/mcp

No MCP client? Call it directly: GET https://gateway.pipeworx.io/v1/tools/observatory_scan for the schema, then POST the same URL with its arguments for the data.

Scan a website’s HTTP security headers with the MDN HTTP Observatory and return its letter grade (A+ to F), numeric score, and how many of Mozilla’s 12 tests it passed. AUTHORITATIVE for “how secure are this site’s headers” / “what is this domain’s Observatory grade” — this is Mozilla’s own scanner, not an estimate. Mozilla reuses a recent scan of the same host rather than re-fetching on every call. Keyless. Use observatory_results for the per-test breakdown and fixes.

Parameters

Name	Type	Required	Description
`host`	string	yes	Hostname to scan, e.g. “mozilla.org”, “www.whitehouse.gov”. A full URL is accepted and reduced to its host.

Example call

Arguments

{
  "host": "mozilla.org"
}

curl

curl -X POST https://gateway.pipeworx.io/mozilla-observatory/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"observatory_scan","arguments":{"host":"mozilla.org"}}}'

TypeScript (@pipeworx/sdk)

import { Pipeworx } from '@pipeworx/sdk';
const pipeworx = new Pipeworx();

const result = await pipeworx.call('observatory_scan', {
  "host": "mozilla.org"
});

Connect

Add this to your MCP client config, or use one-click install buttons:

{
  "mcpServers": {
    "mozilla-observatory": {
      "url": "https://gateway.pipeworx.io/mozilla-observatory/mcp"
    }
  }
}

See Getting Started for client-specific install steps.

observatory_scan