1. Conduid
  2. Security
  3. io.github.aryanspv/har-forensics-mcp
MCP server · Security

io.github.aryanspv/har-forensics-mcp

· github.com/aryanspv/har-forensics-mcp

Audit a .har capture: third-party risk, leaked credentials, JWT checks, redaction. No network calls.

Unclaimed security
InstallView source
37Low

Scored 2 months ago · breakdown

About io.github.aryanspv/har-forensics-mcp

io.github.aryanspv/har-forensics-mcp is an MCP server in the Security category: audit a .har capture: third-party risk, leaked credentials, JWT checks, redaction. No network calls.

Install

Claude Code
claude mcp add io-github-aryanspv-har-forensics-mcp -- npx -y har-forensics-mcp
npx
npx -y har-forensics-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (13)

analyze_har"What's in this capture?" — triage overview, one verdict per check. **Start here.**

Parameters not published.

find_captures"Where are my .har files?" — scans Downloads, Desktop, Documents, cwd, temp.

Parameters not published.

har_briefThe full audit as redacted markdown. The artifact to quote or paste.

Parameters not published.

har_cspA starter Content-Security-Policy synthesized from observed traffic.

Parameters not published.

har_curlThat request as a runnable cURL or `fetch()`, credentials masked.

Parameters not published.

har_diffBefore vs. after: what was added, what regressed, which third parties are new.

Parameters not published.

har_entryEverything about one request: headers, cookies, body, timing phases.

Parameters not published.

har_findingsFindings, worst-first, filterable by severity. Paged.

Parameters not published.

har_huntQuery requests — `is:thirdparty`, `status:>=400`, `type:script`, `host:…`. Returns entry indices.

Parameters not published.

har_perf"Why was this slow?" — slowest requests by dominant phase, per-origin handshake cost, uncompressed assets, time lost to redirects.

Parameters not published.

Show all 13 tools
har_provenanceWho loaded whom — the fourth parties your vendors brought with them.

Parameters not published.

har_vendorsEvery third party, scored 0–100 by blast radius, with an HTTP Archive scrutiny tier.

Parameters not published.

sanitize_harWrite a `.redacted.har` safe to attach to a ticket.

Parameters not published.

Ask AI

✦

Ask AI about io.github.aryanspv/har-forensics-mcp

Powered by Claude · Grounded in docs

I know everything about io.github.aryanspv/har-forensics-mcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About io.github.aryanspv/har-forensics-mcp

How do I install io.github.aryanspv/har-forensics-mcp?

Run claude mcp add io-github-aryanspv-har-forensics-mcp -- npx -y har-forensics-mcp, then add the server to your MCP client's configuration.

Is io.github.aryanspv/har-forensics-mcp safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.aryanspv/har-forensics-mcp still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.