# SiteGuardian

**Category:** 💻 Developer Tools  
**Repository:** https://github.com/gweber/siteguardian-mcp-examples  
**Views:** 0  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/siteguardian

## Description
EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.

## Claude Desktop Quick Installation
Heuristic fallback — verify the package name and runner against the repository README before running it. Uses `npx` (confidence: low):

```json
"mcpServers": {
  "siteguardian": {
    "command": "npx",
    "args": ["-y","siteguardian"]
  }
}
```

## Documentation & README

# SiteGuardian MCP — Examples & Client Configurations

[![MCP](https://img.shields.io/badge/MCP-Streamable--HTTP-blue)](https://modelcontextprotocol.io)
[![EU](https://img.shields.io/badge/Hosted-EU%20%F0%9F%87%AA%F0%9F%87%BA-green)](https://siteguardian.io)
[![Docs](https://img.shields.io/badge/docs-siteguardian.io%2Fdocs%2Fmcp-blue)](https://siteguardian.io/docs/mcp)

Client configurations, copy-paste examples, and the MCP server manifest for the **SiteGuardian** Model Context Protocol server.

> **Note:** This repository contains examples and client integration code only. The MCP server itself is hosted at **https://mcp.siteguardian.io** and is operated as a SaaS — server source is closed. Everything in this repo is MIT-licensed and free to fork.

## What is the SiteGuardian MCP server?

A hosted MCP endpoint that lets Claude Desktop, Claude Code, Cursor, Windsurf, and VS Code Copilot query website-monitoring data and run security/compliance scans through natural-language tool calls.

- **Endpoint:** `https://mcp.siteguardian.io` (or the canonical `https://siteguardian.io/mcp`)
- **Transport:** Streamable HTTP
- **Hosting:** Hetzner, Germany — EU data residency
- **Documentation:** https://siteguardian.io/docs/mcp

## Five tools

| Tool | Auth | Purpose |
|---|---|---|
| `scan_domain` | anonymous | One-off security scan, A–F grade + top 3 issues + permalink |
| `list_monitored_domains` | Bearer | Domains under continuous monitoring for the account |
| `get_domain_status` | Bearer | Current grade + active issues for a monitored domain |
| `get_drift_events` | Bearer | Recent posture changes (TLS, DNSSEC, headers, cookies, JS hosts) |
| `get_fix_recommendations` | Bearer + paid plan | nginx/Apache/DNS snippets + verify commands |

## Try the anonymous tool (no setup required)

```bash
curl -X POST https://mcp.siteguardian.io/ \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"scan_domain","arguments":{"domain":"example.com"}}}'
```

Rate-limited to 10 calls/hour/IP. Cached for 2h per domain. Full curl/Python/JS examples in [`examples/`](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/examples/).

## Install in your client

All clients use the same endpoint. Copy-paste configs in [`clients/`](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/clients/):

- **Claude Desktop** — [`clients/claude-desktop.json`](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/clients/claude-desktop.json)
- **Claude Code (CLI)** — [`clients/claude-code.sh`](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/clients/claude-code.sh)
- **Cursor** — [`clients/cursor.json`](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/clients/cursor.json)
- **Windsurf** — [`clients/windsurf.json`](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/clients/windsurf.json)
- **VS Code / Copilot** — [`clients/vscode.sh`](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/clients/vscode.sh)

## Authentication

The `scan_domain` tool is **anonymous**. The four monitoring tools require a Bearer key:

1. Sign in at https://siteguardian.io
2. Open **Settings → API & Integrations**
3. Click **Generate key**, name it, copy it
4. Add to your client config:
   ```json
   "headers": {"Authorization": "Bearer sg_live_..."}
   ```

API keys are available on the Monitor, Compliance, and Enterprise plans.

## Privacy

- **EU-hosted.** Hetzner Germany. No US sub-processor.
- **No LLM in the response path.** Tool answers are deterministic from monitoring data.
- **No training on your queries.** Logged for abuse prevention and billing only.
- **Audit trail.** Every tool call is recorded in the SHA-256 hash chain.

## Server manifest

The full machine-readable MCP server manifest is in [`server.json`](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/server.json) — this is the file consumed by the Anthropic MCP Registry and the various community directories.

## Roadmap

- [ ] OAuth 2.1 (per current MCP spec)
- [ ] `resources` and `prompts` in addition to `tools`
- [ ] Listing in the official Anthropic MCP Registry
- [ ] Listing on Smithery and mcp.so

## License

Examples and client configurations in this repository are released under the MIT License — see [`LICENSE`](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/LICENSE).

The SiteGuardian MCP server itself is proprietary and hosted as a SaaS. Server source is not distributed.

## Support

- **Documentation:** https://siteguardian.io/docs/mcp
- **Status:** https://siteguardian.io/status
- **Bug or feature request:** [open an issue](https://github.com/gweber/siteguardian-mcp-examples/blob/HEAD/../../issues) or email support@siteguardian.io