# Feranor Resilience [Verified owner] [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://www.feranor.com/tools/mcp  
**Views:** 62  
**Installs:** 0  
**Upvotes:** 1  
**Directory Page:** https://allmcps.com/mcp/feranor-resilience

## Description
Scan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions.

The Tools:

- text_scan_v1 — free
Scans a text string for invisible Unicode characters, homoglyphs, and normalization issues. Returns a risk score, a list of flagged characters, and detected homoglyphs. Never modifies the input text.

- text_purge_v1 — $0.01 per call
Removes invisible Unicode characters and replaces homoglyphs in a text string, then normalizes the result. Returns the cleaned text plus a before-and-after risk comparison.

- domain_check_score_v1 — free
Overall score, per-category scores, and how many findings each category raised. Use it to triage: rank a list of domains, confirm one is healthy, or decide whether the full report is worth pulling. It tells you which categories are weak and how many issues they hold, but not what the issues are.

- domain_check_score_batch_v1 — free
The same triage scores for up to 100 domains in a single call. One score summary per distinct domain: overall score, per-category scores, and how many findings each category raised. Never the findings themselves.

- domain_check_v1 — $0.01 per call
Full report for one domain: weighted score out of 100, per-category breakdown, and every individual finding with a prioritised remediation order.

- domain_check_batch_v1 — from $0.005 per domain
The same full report for up to 100 domains in a single call, with **one payment for the whole batch** instead of one per domain. Both cheaper per domain and much faster than calling `domain_check_v1` in a loop.

## Tools
Capabilities this server exposes over MCP:

- **text_purge_v1** — Removes invisible Unicode characters and replaces homoglyphs in a text string. Returns the cleaned text plus a before-and-after comparison. Use this tool after text_scan_v1 to fix flagged issues. Price: $0.01 per call (x402, USDC on Base). No signup, no API key.
- **domain_check_batch_v1** — Runs the full resilience check on up to 100 domains in a single call and returns the same scored report for each one: TLS certificate, security headers, DNS redundancy, response time, with every individual finding. Use it to audit a portfolio, to rank a list of vendors, or to re-check a fleet after a config rollout. A domain that cannot be reached is returned with its own error rather than failing the batch, and it is still charged, because the crawl was attempted. Do not use it for a single domain: domain_check_v1 is simpler and costs the same for one. Private, internal and localhost hostnames and IP addresses are rejected. Price: $0.01 per domain, dropping to $0.005 from 100 domains, up to 100 per call. One payment covers the whole batch (x402, USDC on Base). No signup, no API key.
- **domain_check_v1** — Measures how resilient a public web domain is from the outside and returns a weighted score out of 100, a per-category breakdown, and prioritised findings explaining what to fix first. Use it to audit a domain you do not control, to verify a fix after deployment, or to compare several domains on the same scale. Covers TLS certificate validity and protocol version, HTTP to HTTPS redirection, HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, cache directives, response time, DNS redundancy, IPv6 availability, CDN detection and software version disclosure. Everything is read from the public internet: nothing is authenticated, no ports are scanned, and no credentials are needed. Do not use it for private, internal, or localhost hostnames, for IP addresses, or to test a service you need logged-in access to. For a free score without the detailed findings, use domain_check_score_v1 instead. Price: $0.01 per call (x402, USDC on Base). No signup, no API key.
- **domain_check_score_v1** — Free. Returns the overall resilience score out of 100 for a public web domain, plus the score of each category and how many findings each one raised. Use it to triage: to rank a list of domains, to confirm a domain is healthy, or to decide whether the detailed report is worth pulling. It tells you which categories are weak and how many issues they hold, but not what the issues are. For the individual findings and the prioritised remediation list, use domain_check_v1. Free, no payment required.
- **text_scan_v1** — Free. Scans a text string for invisible Unicode characters, homoglyphs, and normalization issues. Returns a risk score and a detailed report. Use this tool before text_purge_v1 to inspect suspicious content. Free, no payment required.
- **domain_check_score_batch_v1** — Free. Returns the overall resilience score out of 100 for up to 100 public web domains, plus the score of each category and how many findings each one raised. Use it to triage a portfolio: rank a list of domains, confirm which ones are healthy, or decide which ones are worth pulling the full report on. It tells you which categories are weak and how many issues they hold, but not what the issues are. A domain that cannot be reached is returned with its own error rather than failing the batch. Duplicates are removed. For the individual findings and the prioritised remediation list on a whole list, use domain_check_batch_v1. For a single domain, use domain_check_score_v1. Free, no payment required.

## Claude Desktop Quick Installation
Remote MCP endpoint (confidence: medium). Install path inferred — verify against the README before running it. Add as a URL/SSE server in your client:

```json
"mcpServers": {
  "feranor-resilience": {
    "url": "https://www.feranor.com/tools/mcp"
  }
}
```

## Documentation

## What Feranor Resilience MCP server does

The Feranor Resilience MCP server provides MCP tools for two related checks: text safety and web-domain resilience. Text tools identify characters that may be difficult to see or may impersonate other characters, while domain tools assess technical health across TLS, DNS, HTTP headers, and response speed.

Text analysis is non-destructive. A scan returns a risk score, flagged characters, and detected homoglyphs without changing the supplied string. A separate purge operation removes invisible characters, substitutes homoglyphs, normalizes the result, and reports how the risk changed between the original and cleaned versions.

Domain checks have two levels. Score tools provide an overall result, category-level scores, and finding counts, making them suitable for ranking domains or deciding whether a full investigation is needed. Full checks add the individual findings and a prioritized order for remediation.

## How it works

The Feranor Resilience MCP server exposes separate tools for individual and batch operations. Text operations accept a string. Domain score and full-report operations accept domains, with batch variants handling up to 100 domains in one request.

The score-only domain tools are intended for triage: they indicate which categories are weaker and how many findings exist, but they do not disclose the findings themselves. The full single-domain report includes a weighted score out of 100, category details, each finding, and suggested remediation priority.

Batch full reports use one payment for the complete request rather than charging separately for every domain. The listed price starts at $0.005 per domain for this batch mode, while an individual full report costs $0.01. Score operations and text scanning are listed as free; text purging costs $0.01 per call.

## Tools and capabilities

- `text_scan_v1`: Detects invisible Unicode characters, homoglyphs, and normalization issues, then returns risk information.
- `domain_check_score_v1`: Produces a summary score and finding counts for one domain.
- `domain_check_score_batch_v1`: Produces the same summaries for up to 100 domains.
- `domain_check_v1`: Returns a detailed report for one domain with prioritized remediation.
- `domain_check_batch_v1`: Returns detailed reports for up to 100 domains under one batch charge.

## Limitations and notes

Score-only domain calls cannot be used to inspect the actual problems; they report counts and category scores rather than individual findings. Use a full report when remediation details are required.

Pricing is stated per operation, with free score and scan calls and paid purge or detailed-report calls.

_Full upstream README: https://allmcps.com/mcp/feranor-resilience/readme_