Wardzo MCP Server

About Wardzo

The Wardzo MCP server lets your AI assistant check a live website for leaked API keys, exposed files, missing security headers, SEO and indexing problems and downtime, then explain each issue with fix steps it can apply in your code. Remote Streamable HTTP, nothing to install. `scan_site` and `get_report` work without an account (summary only). Sign in (OAuth) or use a free API key for full findings and monitored sites.

Wardzo tools (12)

Read from the live server on Oct 30, 2026. These are the tools your AI assistant can call once connected.

scan_site

Run a passive outside-in Wardzo scan of a public website (security, SEO health, uptime) and return the score, issues and report URL. Waits up to ~45 seconds for the result. Works without an API key (rate limited).

get_report

Get the result of a Wardzo scan by its id (from scan_site, recheck_site or a wardzo.com/r/<id> link).

list_sites

List the websites monitored in your Wardzo account with their latest score, open issue counts and uptime status.

add_site

Start monitoring a website: it is scanned now, then re-scanned on your plan schedule, with uptime checks and email alerts.

get_site_status

Latest score (with change since the previous scan), open issues by severity, top issues, uptime (24h and 7d) and what changed in the last scan, for one of your monitored sites.

list_issues

List open issues from the latest scan of one of your sites, most severe first. Each issue has an issue_id for explain_issue.

get_new_findings

Get the findings Wardzo detected on your monitored sites since this connection last checked (background re-scans, re-checks and new sites), newest last, and mark them as seen for this connection. A finding that stays open across scans is re

explain_issue

Explain why an issue matters and give step-by-step fix instructions (with Next.js, Vercel, Netlify, Nginx, Apache, Cloudflare and WordPress snippets where relevant) that an AI coding agent can apply, plus how to verify.

recheck_site

Run a fresh scan of one of your monitored sites (e.g. after deploying a fix) and report what changed. Waits up to ~45 seconds.

list_endpoints

List the endpoint checks (GET/HEAD monitors for specific URLs such as /api/health) on one of your sites, with their current status, last HTTP status and response time.

add_endpoint

Monitor a specific URL on one of your verified sites (for example an API health route, login or checkout page) with a GET or HEAD request on a schedule. The domain must be verified first, and the URL must not include a query string. Optiona

remove_endpoint

Stop monitoring one endpoint check and delete its history. Use list_endpoints to find the endpoint_id.

How to connect Wardzo to Claude, Cursor or VS Code

Wardzo runs as a hosted remote MCP server at https://wardzo.com/mcp. Add that URL to your MCP client's config (Claude Code, Cursor, Windsurf or VS Code) and the tools appear immediately, no install required.

{
  "mcpServers": {
    "wardzo": {
      "url": "https://wardzo.com/mcp"
    }
  }
}

Claude Code: claude mcp add --transport http wardzo https://wardzo.com/mcp. Servers that require OAuth or an API key will prompt on first use.