- Home
- AI assistants
KrakenShield in your AI assistant
Add the public KrakenShield MCP server to Claude, ChatGPT or your code editor. Your assistant can then check a website’s HTTPS setup in seconds, ground its answers on our cybersecurity library and quote our current prices. Free, no account.
Server URL
https://api.krakenshield.eu/mcp
HTTP transport (Streamable HTTP), no authentication.
Three read-only tools
Quick HTTPS check
check_ssl
Certificate (issuer, expiry, trust, name), negotiated TLS version, HTTP to HTTPS redirect and security headers (HSTS, CSP, clickjacking protection…). The issues to fix, most severe first.
Cybersecurity library
search_cyber_knowledge
Glossary, acronyms, certifications and the Cyber A to Z guide of the Knowledge Center, with the link of each page to cite the source.
Current prices
get_pricing
Kredit cost of each audit and price of the packs, read live.
Add it to your assistant
Claude (web and app)
- Open Settings › Connectors.
- Choose "Add custom connector".
- Name: KrakenShield, URL: the address above.
ChatGPT
- Open Settings › Apps & Connectors.
- Turn on developer mode in the advanced settings if your plan requires it.
- Create a connector with the address above, without authentication.
In an editor or on the command line
claude mcp add --transport http krakenshield https://api.krakenshield.eu/mcp{
"mcpServers": {
"krakenshield": {
"url": "https://api.krakenshield.eu/mcp"
}
}
}{
"servers": {
"krakenshield": {
"type": "http",
"url": "https://api.krakenshield.eu/mcp"
}
}
}Then ask
- Is example.com properly set up for HTTPS?
- What is HSTS and how do I enable it? Cite your sources.
- How much does a penetration test cost at KrakenShield?
What the server does and does not do
- Passive check: one TLS connection and two page requests, like a browser visit. No port scan, no attack.
- It gives no grade. The full SSL/TLS audit (protocol versions, cipher suites, known vulnerabilities, grade from A+ to F) runs from the console.
- No account, no cookie. We keep a technical log of the calls (tool, website checked) to prevent abuse. Results are cached for 15 minutes.
- Private or local addresses are refused, and the number of checks is rate-limited to prevent abuse.
Go further
