INDIVIDUAL MCP TOOL

check_headers

Fetch a URL once and grade its response headers: HSTS, Content-Security-Policy, X-Content-Type-Options, frame control, Referrer-Policy, Permissions-Policy, Cache-Control, cookie Secure/HttpOnly/SameSite flags, and server version leaks.

allthepossibles.comnone authenticationAvailability not checked

LIVE ENDPOINT

https://toolbox.allthepossibles.com/mcp

No auth detected

Connect to this endpoint to inspect the live schema for check_headers and invoke it with your own arguments.

Indexed input schema

{}

Risk classification

Inferred read-only · medium confidence · heuristic, not a guarantee.

A tool name or description suggests retrieving external content.

Parent server

allthepossibles.com

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.toolbox]
url = "https://toolbox.allthepossibles.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "toolbox": {
      "type": "http",
      "url": "https://toolbox.allthepossibles.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: toolbox
Remote MCP URL: https://toolbox.allthepossibles.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "toolbox": {
      "url": "https://toolbox.allthepossibles.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "toolbox": {
      "type": "http",
      "url": "https://toolbox.allthepossibles.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "toolbox",
  "transport": "streamable-http",
  "url": "https://toolbox.allthepossibles.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

Related tools

check_tells — Check text for AI-writing tells (em-dashes, 'not just X but Y', rule-of-three lists, stock vocabulary like delve or seamlessly, hedge words, smart quotes, hidden Unicode) and return a score, each tell with its position, and a cleaned copy.
manifest_cost — Estimate what an MCP server's tools/list costs in tokens on every session start, per tool, with the three most expensive tools and flags for oversized descriptions, base64 blobs and echoed schemas.
lint_agent_md — Lint a CLAUDE.
mcp_install_snippets — Generate install snippets for an MCP endpoint (Claude Code, Claude Desktop, Cursor, Codex, VS Code, curl) and probe the endpoint once to confirm it answers initialize and tools/list.
check_ai_crawlers — Read a site's robots.
check_page_meta — Fetch a URL and report what crawlers and link unfurlers see: title and meta description with lengths, canonical, lang, viewport, robots meta, h1s, Open Graph and Twitter card tags, favicon, JSON-LD types, the resulting preview card, and findings for anything missing or too long.
json_to_schema — Turn a JSON sample (or an array of samples of the same shape) into a JSON Schema draft 2020-12 and a TypeScript type.
explain_cron — Explain a five-field cron expression in plain English, list the next runs in UTC, and warn about the cases Cloudflare Workers, GitHub Actions and crontab handle differently (nicknames, six fields, day-of-month plus day-of-week, sub-5-minute intervals, day 31).