Security & Testing
corrie.io
Loads a website's homepage like a browser to report its HTTPS setup and security headers such as HSTS, CSP, and X-Frame-Options.
ENDPOINT 1
https://corrie.io/mcp
MCP server metadata
- Name
- corrie
- Version
- 1.0.0
Corrie checks the HTTPS setup and security headers of a public website and explains each problem in plain English with a fix. Use check_website when someone asks whether a site is secure, why a browser warns about it, or how to harden its headers.
Known tools 1
check_websiteLoads the homepage of a public website once, the way a visitor's browser would, and reports its HTTPS setup and security headers (HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and others).
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.corrie]
url = "https://corrie.io/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"corrie": {
"type": "http",
"url": "https://corrie.io/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: corrie
Remote MCP URL: https://corrie.io/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"corrie": {
"url": "https://corrie.io/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"corrie": {
"type": "http",
"url": "https://corrie.io/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "corrie",
"transport": "streamable-http",
"url": "https://corrie.io/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Trust Data Available
BuiltWith Trust API v2 evidence for corrie.io was fetched 2026-10-15T02:52:37.319Z.
corrie.io is assessed as Trusted: Domain has an established technology history spanning over a year.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.