Unchore Defend MCP
Unchore Defend is an open-source security tool that grades a site's security headers (A-F) and provides fixes, or analyzes logs and code to identify security incidents. It functions as an MCP server and Claude Code plugin, requiring no installation for the site check tool, while the defend tool requires an API key to query models like Claude or GPT for forensic analysis.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Grade a website's security headers and receive fix recommendations
- Analyze access logs or code snippets to detect security incidents
- Integrate into Claude Code or any MCP client for automated security checks
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
https://github.com/smilemino/unchore-defend/releases/download/v0.1.0/unchore-defend.mcpb
{
"transport": "stdio",
"fileSha256": "302a753ed7471077bbf76cfbda6806d01ad1ffd2f97f49deab664bed02664785",
"identifier": "https://github.com/smilemino/unchore-defend/releases/download/v0.1.0/unchore-defend.mcpb",
"registryType": "mcpb",
"environmentVariables": [
{
"name": "OPENROUTER_API_KEY",
"description": "Your OpenRouter key, for defend_analyze (optional)"
},
{
"name": "UNCHORE_TOKEN",
"description": "An Unchore key instead of an AI account, for defend_analyze (optional)"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Let your agent find its tools
Find servers like Unchore Defend MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.