1. Conduid
  2. Security
  3. SiteGuardian
MCP server · Security

SiteGuardian

by · github.com/gweber/siteguardian-mcp-examples

EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.

Unclaimed last commit 6 months ago security
InstallView source
34Low

Scored 6 months ago · breakdown

About SiteGuardian

SiteGuardian is an MCP server published by gweber in the Security category: eU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.

Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/gweber/siteguardian-mcp-examples

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (5)

get_domain_statusBearer

Parameters not published.

get_drift_eventsBearer

Parameters not published.

get_fix_recommendationsBearer + paid plan

Parameters not published.

list_monitored_domainsBearer

Parameters not published.

scan_domainanonymous

Parameters not published.

Ask AI

✦

Ask AI about SiteGuardian

Powered by Claude · Grounded in docs

I know everything about SiteGuardian. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

SiteGuardian MCP — Examples & Client Configurations

MCP EU Docs

Client configurations, copy-paste examples, and the MCP server manifest for the SiteGuardian Model Context Protocol server.

Note: This repository contains examples and client integration code only. The MCP server itself is hosted at https://mcp.siteguardian.io and is operated as a SaaS — server source is closed. Everything in this repo is MIT-licensed and free to fork.

What is the SiteGuardian MCP server?

A hosted MCP endpoint that lets Claude Desktop, Claude Code, Cursor, Windsurf, and VS Code Copilot query website-monitoring data and run security/compliance scans through natural-language tool calls.

  • Endpoint: https://mcp.siteguardian.io (or the canonical https://siteguardian.io/mcp)
  • Transport: Streamable HTTP
  • Hosting: Hetzner, Germany — EU data residency
  • Documentation: https://siteguardian.io/docs/mcp

Five tools

Tool Auth Purpose
scan_domain anonymous One-off security scan, A–F grade + top 3 issues + permalink
list_monitored_domains Bearer Domains under continuous monitoring for the account
get_domain_status Bearer Current grade + active issues for a monitored domain
get_drift_events Bearer Recent posture changes (TLS, DNSSEC, headers, cookies, JS hosts)
get_fix_recommendations Bearer + paid plan nginx/Apache/DNS snippets + verify commands

Try the anonymous tool (no setup required)

curl -X POST https://mcp.siteguardian.io/ \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"scan_domain","arguments":{"domain":"example.com"}}}'

Rate-limited to 10 calls/hour/IP. Cached for 2h per domain. Full curl/Python/JS examples in examples/.

Install in your client

All clients use the same endpoint. Copy-paste configs in clients/:

Authentication

The scan_domain tool is anonymous. The four monitoring tools require a Bearer key:

  1. Sign in at https://siteguardian.io
  2. Open Settings → API & Integrations
  3. Click Generate key, name it, copy it
  4. Add to your client config: 
    "headers": {"Authorization": "Bearer sg_live_..."}

API keys are available on the Monitor, Compliance, and Enterprise plans.

Privacy

  • EU-hosted. Hetzner Germany. No US sub-processor.
  • No LLM in the response path. Tool answers are deterministic from monitoring data.
  • No training on your queries. Logged for abuse prevention and billing only.
  • Audit trail. Every tool call is recorded in the SHA-256 hash chain.

Server manifest

The full machine-readable MCP server manifest is in server.json — this is the file consumed by the Anthropic MCP Registry and the various community directories.

Roadmap

  • OAuth 2.1 (per current MCP spec)
  • resources and prompts in addition to tools
  • Listing in the official Anthropic MCP Registry
  • Listing on Smithery and mcp.so

License

Examples and client configurations in this repository are released under the MIT License — see LICENSE.

The SiteGuardian MCP server itself is proprietary and hosted as a SaaS. Server source is not distributed.

Support

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About SiteGuardian

How do I install SiteGuardian?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is SiteGuardian safe to use with an AI agent?

Its trust score is 34 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is SiteGuardian still maintained?

The last commit was 6 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.