MDN HTTP Observatory

liveSecurity

MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from Mozilla's public scanner.

3tools
0msauth
free tier50 calls/day

Tools

observatory_scan

Scan a website's HTTP security headers with the MDN HTTP Observatory and return its letter grade (A+ to F), numeric score, and how many of Mozilla's 12 tests it passed. AUTHORITATIVE for "how secure a

No parameters required.

▶Try it
observatory_results

Get the full MDN HTTP Observatory breakdown for a host: every one of the 12 security tests with pass/fail, the score impact, Mozilla's specific remediation advice (CSP, HSTS, cookies, CORS, referrer p

No parameters required.

▶Try it
observatory_grade_distribution

Grade distribution across every site the MDN HTTP Observatory has scanned — how many sites hold each grade from A+ to F. Use it to say where one site's grade sits relative to the web (e.g. "a B beats

No parameters required.

▶Try it

Test with curl

The gateway speaks JSON-RPC 2.0 over HTTP POST. You can test any pack directly from the terminal.

List available tools
bash
curl -X POST https://gateway.pipeworx.io/mozilla-observatory/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
Call a tool
bash
curl -X POST https://gateway.pipeworx.io/mozilla-observatory/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"observatory_scan","arguments":{}}}'

Use with the SDK

Install @pipeworx/sdk to call tools from any TypeScript/Node project.

TypeScript
import { Pipeworx } from '@pipeworx/sdk';
const px = new Pipeworx();
const result = await px.call("observatory_scan", {});
ask_pipeworx
// Or ask in plain English:
const answer = await px.ask("mdn http observatory — grade any website's http security headers and get the specific fixes, from mozilla's public scanner");