Security & Testing
agentfriendlyweb.dev
Audits public websites for agent-friendly signals and verifies allowlisted public registry profiles and releases without modifying or persisting data.
ENDPOINT 1
https://mcp.agentfriendlyweb.dev/mcp
MCP server metadata
- Name
- agent-friendly-web-public
- Version
- 0.1.0
Known tools 4
audit_public_siteObserva senales agent-friendly publicas con proteccion SSRF, sin persistir ni modificar el sitio.
Inferred read-onlyget_afw_methodologyDevuelve una seccion publica y versionada de la metodologia AF-0 a AF-5.
Inferred read-onlyget_public_registry_profileLee exclusivamente un perfil ya publicado; nunca accede a expedientes o borradores privados.
Inferred read-onlyverify_public_okf_releaseVerifica en memoria la release OKF v0.2 allowlisted, sin escribir archivos ni consultar otro origen.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.agent-friendly-web-public]
url = "https://mcp.agentfriendlyweb.dev/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"agent-friendly-web-public": {
"type": "http",
"url": "https://mcp.agentfriendlyweb.dev/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: agent-friendly-web-public
Remote MCP URL: https://mcp.agentfriendlyweb.dev/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"agent-friendly-web-public": {
"url": "https://mcp.agentfriendlyweb.dev/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"agent-friendly-web-public": {
"type": "http",
"url": "https://mcp.agentfriendlyweb.dev/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "agent-friendly-web-public",
"transport": "streamable-http",
"url": "https://mcp.agentfriendlyweb.dev/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Loading Trust v2 evidence…
Checking the associated registrable domain. The BuiltWith key remains server-side.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.