{"apiVersion":"v1","directorySlug":"npmeta-mcp-e939539460","title":"NPMeta Security","description":"Free online website and API security posture scanner by npmeta.com. Audit web apps, APIs, and vibe coding / AI coding projects (Claude, Cursor, GPT) for OWASP vulnerabilities, BFLA, exposed secrets, TLS certificates, CORS, and security headers.","pageUrl":"https://www.mcpbundles.com/skills/npmeta-mcp-e939539460","connectPath":"importable","connectAction":"import_server","catalogListing":false,"bundleSlug":null,"listingKind":"remote_mcp","kind":"provider","transportUrl":"https://npmeta.com/mcp","hostedMcpUrl":null,"toolCount":5,"toolInventoryStatus":"observed","refreshedAt":"2026-11-03T13:26:00.516172+00:00","registryName":"com.npmeta/npmeta-mcp-e939539460","registryVersion":"2026.11.3","registryEligible":true,"tools":[{"name":"npmeta_audit_target","description":"Performs a comprehensive, non-destructive security posture audit of a website or API using NPMeta Security (npmeta.com) 17 analysis engines. Evaluates TLS certificates, HTTP security headers (CSP, HSTS, XFO), cookies, CORS, technology leaks, API docs, admin route exposures, and secrets. Returns a normalized 0-100 score, posture grade (EXCELLENT, GOOD, FAIR, WEAK, CRITICAL), and actionable remediation instructions.","inputSchema":{"type":"object","required":["url"],"properties":{"url":{"type":"string"},"allow_local":{"type":"boolean","default":false}}},"logicalName":"npmeta_audit_target","displayName":"npmeta_audit_target","title":"npmeta_audit_target","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"npmeta_check_headers","description":"Rapidly evaluates HTTP response security headers (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), CORS configuration, and cookie security attributes (Secure, HttpOnly, SameSite).","inputSchema":{"type":"object","required":["url"],"properties":{"url":{"type":"string"}}},"logicalName":"npmeta_check_headers","displayName":"npmeta_check_headers","title":"npmeta_check_headers","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"npmeta_check_tls","description":"Audits SSL/TLS certificate validity, expiry date, days remaining, certificate authority/issuer, negotiated TLS version (TLS 1.2, 1.3), and cipher suite strength.","inputSchema":{"type":"object","required":["url"],"properties":{"url":{"type":"string"}}},"logicalName":"npmeta_check_tls","displayName":"npmeta_check_tls","title":"npmeta_check_tls","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"npmeta_get_remediation","description":"Generates copy-paste configuration snippets (Nginx, Caddy, Apache, FastAPI, Express, Next.js) to remediate specific security findings detected by NPMeta Security.","inputSchema":{"type":"object","required":["url"],"properties":{"url":{"type":"string"},"finding_title":{"type":"string"}}},"logicalName":"npmeta_get_remediation","displayName":"npmeta_get_remediation","title":"npmeta_get_remediation","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"npmeta_solana_verify","description":"Audits a Solana dApp, Actions manifest (.well-known/actions.json), or RPC endpoint for security posture, drainer scripts, leaked Solana keypairs, and on-chain attestation status. Essential for autonomous Solana AI agents to verify dApp safety before transacting.","inputSchema":{"type":"object","required":["url"],"properties":{"url":{"type":"string"},"min_score":{"type":"integer","default":70},"allow_local":{"type":"boolean","default":false}}},"logicalName":"npmeta_solana_verify","displayName":"npmeta_solana_verify","title":"npmeta_solana_verify","annotations":{"untrustedContentHint":true,"readOnlyHint":true}}],"toolSource":"directory_preview","agentAction":"both","installLinks":[{"id":"cursor","label":"Cursor","href":"cursor://anysphere.cursor-deeplink/mcp/install?name=NPMeta-Security&config=eyJ1cmwiOiAiaHR0cHM6Ly9ucG1ldGEuY29tL21jcCJ9"},{"id":"vscode","label":"VS Code","href":"vscode:mcp/install?%7B%22name%22%3A%22NPMeta-Security%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fnpmeta.com%2Fmcp%22%7D"},{"id":"vscode-insiders","label":"VS Code Insiders","href":"vscode-insiders:mcp/install?%7B%22name%22%3A%22NPMeta-Security%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fnpmeta.com%2Fmcp%22%7D"},{"id":"claude-web","label":"Claude.ai","href":"https://claude.ai/customize/connectors?modal=add-custom-connector&connectorName=NPMeta+Security&connectorUrl=https%3A%2F%2Fnpmeta.com%2Fmcp"},{"id":"codex","label":"Codex","copyText":"codex mcp add \"NPMeta-Security\" --url \"https://npmeta.com/mcp\""},{"id":"chatgpt","label":"ChatGPT","href":"https://www.mcpbundles.com/docs/integrations/chatgpt"}],"catalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/npmeta-mcp-e939539460","callUrl":"https://www.mcpbundles.com/api/directory/v1/servers/npmeta-mcp-e939539460/tools/{tool}","mcpServerUrl":"https://npmeta.com/mcp","liveCatalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/npmeta-mcp-e939539460?live=1"}