Install Web Exposure in Claude Code
This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:
claude mcp add web-exposure -- <command to start the server>Frequently asked questions
What does the Web Exposure MCP server do?
Read-only check of a live URL for publicly exposed secret files: .git, .env, JS source maps, backup/SQL dumps, directory listings and dotfiles.
Is the Web Exposure MCP server free?
Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.
Does Web Exposure run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Web Exposure to Claude Code?
Follow the install steps in the project's README at https://github.com/Perufitlife/web-exposure-mcp, then register it with "claude mcp add".
More security & identity MCP servers
View allAgentic Wallet Guardian v3
rudimentall1/agentic-wallet-guardian-v3
Self-hosted security layer that evaluates AI agents' proposed blockchain transactions and returns an explainable allow, warn or block decision.
Vaulted
vaulted-fyi/vaulted-mcp-server
Share end-to-end encrypted, self-destructing secrets from an agent, reading them from env vars or files so they stay out of LLM context.
Agentradar
Bichev/agentradar-mcp
On-chain trust oracle for ERC-8004 and x402 agents: composite trust scoring, a scam wallet database, ERC-8004 identity lookup and EAS attestations on Base.
Smallprint Action
gostanos/smallprint-action/mcp
Query the Small Print record: versioned, diffed tool descriptions and schemas of MCP servers, skills and plugins, with graded changes and public advisories.
Agentscore
Thezenmonster/agentscore-mcp-server
Security trust layer that monitors MCP packages on npm for install scripts, command injection, hardcoded secrets, capability drift and publisher posture.
Skillssafe
GUCCI-atlasv/skillssafe-mcp
Scan SKILL.md files, MCP configs and system prompts for credential theft, prompt injection, zero-width character attacks and ClawHavoc indicators.