panda-web-security-tools 0.1.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. panda_web_security_tools-0.1.0/.github/release-notes.md +13 -0
  2. panda_web_security_tools-0.1.0/.github/workflows/autofix.yml +52 -0
  3. panda_web_security_tools-0.1.0/.github/workflows/ci.yml +75 -0
  4. panda_web_security_tools-0.1.0/.github/workflows/publish-mcp-registry.yml +43 -0
  5. panda_web_security_tools-0.1.0/.github/workflows/release.yml +91 -0
  6. panda_web_security_tools-0.1.0/.gitignore +8 -0
  7. panda_web_security_tools-0.1.0/.pre-commit-config.yaml +7 -0
  8. panda_web_security_tools-0.1.0/Dockerfile +13 -0
  9. panda_web_security_tools-0.1.0/LICENSE +21 -0
  10. panda_web_security_tools-0.1.0/PKG-INFO +105 -0
  11. panda_web_security_tools-0.1.0/README.md +81 -0
  12. panda_web_security_tools-0.1.0/glama.json +4 -0
  13. panda_web_security_tools-0.1.0/pyproject.toml +56 -0
  14. panda_web_security_tools-0.1.0/scripts/lint-fix.sh +19 -0
  15. panda_web_security_tools-0.1.0/server.json +33 -0
  16. panda_web_security_tools-0.1.0/src/panda_web_security_tools/__init__.py +3 -0
  17. panda_web_security_tools-0.1.0/src/panda_web_security_tools/__main__.py +4 -0
  18. panda_web_security_tools-0.1.0/src/panda_web_security_tools/server.py +5 -0
  19. panda_web_security_tools-0.1.0/uv.lock +832 -0
panda_web_security_tools-0.1.0/.github/release-notes.md ADDED
@@ -0,0 +1,13 @@
1
+ **Install** from [PyPI](https://pypi.org/project/panda-web-security-tools/) (needs [uv](https://docs.astral.sh/uv/) and a free [Apify token](https://console.apify.com/settings/integrations)):
2
+
3
+ ```bash
4
+ uvx panda-web-security-tools@{{VERSION}}
5
+ ```
6
+
7
+ - **Cursor / Claude / VS Code:** command `uvx`, args `["panda-web-security-tools"]`, env `APIFY_TOKEN`.
8
+ - Official MCP Registry name: `io.github.pandadad0214/panda-web-security-tools`.
9
+
10
+ ### Added
11
+ - First PyPI and Official MCP Registry release of this focused domain server ({{VERSION}}).
12
+
13
+ Full docs: [README](https://github.com/pandadad0214/panda-web-security-tools#readme).
panda_web_security_tools-0.1.0/.github/workflows/autofix.yml ADDED
@@ -0,0 +1,52 @@
1
+ name: Autofix
2
+
3
+ on:
4
+ push:
5
+ branches: [master]
6
+
7
+ permissions:
8
+ contents: write
9
+
10
+ concurrency:
11
+ group: autofix-${{ github.ref }}
12
+ cancel-in-progress: true
13
+
14
+ jobs:
15
+ ruff:
16
+ name: Ruff autofix
17
+ runs-on: ubuntu-latest
18
+ timeout-minutes: 10
19
+ # Loop protection: skip bot pushes and [skip ci] commits.
20
+ # GITHUB_TOKEN pushes also do not re-trigger workflows.
21
+ if: >-
22
+ github.actor != 'github-actions[bot]'
23
+ && !contains(github.event.head_commit.message, '[skip ci]')
24
+ steps:
25
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
26
+ - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
27
+ with:
28
+ python-version: "3.13"
29
+ - name: Autofix with ruff
30
+ run: |
31
+ set -euo pipefail
32
+ :
33
+ uv run --with ruff==0.17.3 ruff check . --fix
34
+ uv run --with ruff==0.17.3 ruff format .
35
+ - name: Commit and push if needed
36
+ run: |
37
+ set -euo pipefail
38
+ if git diff --quiet && git diff --cached --quiet; then
39
+ echo "No ruff changes"
40
+ exit 0
41
+ fi
42
+ git config user.name "github-actions[bot]"
43
+ git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
44
+ git add -A
45
+ git commit -m "style: ruff autofix"
46
+ git push
47
+ - name: Verify clean
48
+ run: |
49
+ set -euo pipefail
50
+ :
51
+ uv run --with ruff==0.17.3 ruff check .
52
+ uv run --with ruff==0.17.3 ruff format --check .
panda_web_security_tools-0.1.0/.github/workflows/ci.yml ADDED
@@ -0,0 +1,75 @@
1
+ name: CI
2
+
3
+ on:
4
+ push:
5
+ branches: [master]
6
+ pull_request:
7
+ workflow_dispatch:
8
+
9
+ permissions:
10
+ contents: read
11
+
12
+ concurrency:
13
+ group: ci-${{ github.ref }}
14
+ cancel-in-progress: true
15
+
16
+ jobs:
17
+
18
+ lint:
19
+ name: Lint (ruff)
20
+ runs-on: ubuntu-latest
21
+ timeout-minutes: 10
22
+ steps:
23
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
24
+ with:
25
+ persist-credentials: false
26
+ - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
27
+ with:
28
+ python-version: "3.13"
29
+ - run: uv run --with ruff==0.17.3 ruff format --check .
30
+ - run: uv run --with ruff==0.17.3 ruff check .
31
+
32
+ registry-metadata:
33
+ name: Validate server.json
34
+ runs-on: ubuntu-latest
35
+ timeout-minutes: 10
36
+ env:
37
+ MCP_PUBLISHER_VERSION: v1.8.7
38
+ MCP_PUBLISHER_SHA256: 00b21004149a4ce66f0782508ae4a2bce67d1bea395a8da0bd8028159fb59579
39
+ steps:
40
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
41
+ with:
42
+ persist-credentials: false
43
+ - name: server.json and glama.json are valid JSON
44
+ run: |
45
+ python3 -m json.tool server.json > /dev/null
46
+ python3 -m json.tool glama.json > /dev/null
47
+ - name: Registry description stays within MCP 100-char limit
48
+ run: |
49
+ python3 - <<'PY'
50
+ import json, sys
51
+ desc = json.load(open("server.json"))["description"]
52
+ n = len(desc)
53
+ print(f"description length={n}/100")
54
+ if n > 100:
55
+ sys.stderr.write(
56
+ f"ERROR: MCP Registry requires body.description <= 100 chars; got {n}: {desc!r}\n"
57
+ )
58
+ sys.exit(1)
59
+ PY
60
+ - name: Versions and registry name stay in sync
61
+ run: |
62
+ v="$(python3 -c 'import tomllib;print(tomllib.load(open("pyproject.toml","rb"))["project"]["version"])')"
63
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["version"])')" = "$v"
64
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["packages"][0]["version"])')" = "$v"
65
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["name"])')" = "io.github.pandadad0214/panda-web-security-tools"
66
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["packages"][0]["identifier"])')" = "panda-web-security-tools"
67
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["packages"][0]["transport"]["type"])')" = "stdio"
68
+ grep -q 'panda-web-security-tools = "panda_web_security_tools.server:main"' pyproject.toml
69
+ grep -q 'mcp-name: io.github.pandadad0214/panda-web-security-tools' README.md
70
+ - name: Install mcp-publisher (pinned, checksum verified)
71
+ run: |
72
+ curl -fsSL -o mcp-publisher.tgz "https://github.com/modelcontextprotocol/registry/releases/download/${MCP_PUBLISHER_VERSION}/mcp-publisher_linux_amd64.tar.gz"
73
+ echo "${MCP_PUBLISHER_SHA256} mcp-publisher.tgz" | sha256sum -c -
74
+ tar xzf mcp-publisher.tgz mcp-publisher
75
+ - run: ./mcp-publisher validate
panda_web_security_tools-0.1.0/.github/workflows/publish-mcp-registry.yml ADDED
@@ -0,0 +1,43 @@
1
+ name: Publish to MCP Registry
2
+
3
+ # Publishes server.json to the official MCP Registry when a release tag is pushed.
4
+ # Uses GitHub OIDC, so no registry token is stored in this repository.
5
+ # This stdio package is io.github.pandadad0214/panda-web-security-tools.
6
+ # Do not publish it as io.github.pandadad0214/panda-research-mcp (hosted research server).
7
+ on:
8
+ push:
9
+ tags: ["v*"]
10
+ workflow_dispatch:
11
+
12
+ permissions:
13
+ contents: read
14
+
15
+ jobs:
16
+ publish:
17
+ runs-on: ubuntu-latest
18
+ timeout-minutes: 10
19
+ permissions:
20
+ contents: read
21
+ id-token: write
22
+ env:
23
+ MCP_PUBLISHER_VERSION: v1.8.7
24
+ MCP_PUBLISHER_SHA256: 00b21004149a4ce66f0782508ae4a2bce67d1bea395a8da0bd8028159fb59579
25
+ steps:
26
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
27
+ with:
28
+ persist-credentials: false
29
+ - name: Check the tag matches server.json and pyproject.toml
30
+ if: startsWith(github.ref, 'refs/tags/v')
31
+ run: |
32
+ test "v$(python3 -c 'import json;print(json.load(open("server.json"))["version"])')" = "${GITHUB_REF_NAME}"
33
+ test "v$(python3 -c 'import tomllib;print(tomllib.load(open("pyproject.toml","rb"))["project"]["version"])')" = "${GITHUB_REF_NAME}"
34
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["packages"][0]["version"])')" = "${GITHUB_REF_NAME#v}"
35
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["name"])')" = "io.github.pandadad0214/panda-web-security-tools"
36
+ - name: Install mcp-publisher (pinned, checksum verified)
37
+ run: |
38
+ curl -fsSL -o mcp-publisher.tgz "https://github.com/modelcontextprotocol/registry/releases/download/${MCP_PUBLISHER_VERSION}/mcp-publisher_linux_amd64.tar.gz"
39
+ echo "${MCP_PUBLISHER_SHA256} mcp-publisher.tgz" | sha256sum -c -
40
+ tar xzf mcp-publisher.tgz mcp-publisher
41
+ - run: ./mcp-publisher validate
42
+ - run: ./mcp-publisher login github-oidc
43
+ - run: ./mcp-publisher publish
panda_web_security_tools-0.1.0/.github/workflows/release.yml ADDED
@@ -0,0 +1,91 @@
1
+ name: Release
2
+
3
+ # On a v* tag: verify versions, lint, build wheel + sdist, publish to PyPI
4
+ # (Trusted Publishing / OIDC, no stored token), then create the GitHub Release.
5
+ # Re-publish an existing tag to PyPI with: Actions -> Release -> Run workflow (tag = vX.Y.Z).
6
+ on:
7
+ push:
8
+ tags: ["v*"]
9
+ workflow_dispatch:
10
+ inputs:
11
+ tag:
12
+ description: "Existing release tag to publish to PyPI (e.g. v0.1.0)"
13
+ required: true
14
+
15
+ permissions:
16
+ contents: read
17
+
18
+ jobs:
19
+ build:
20
+ runs-on: ubuntu-latest
21
+ timeout-minutes: 15
22
+ env:
23
+ TAG: ${{ github.event.inputs.tag || github.ref_name }}
24
+ steps:
25
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
26
+ with:
27
+ ref: ${{ github.event.inputs.tag || github.ref }}
28
+ persist-credentials: false
29
+ - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
30
+ - name: Tag matches pyproject, server.json and __init__
31
+ run: |
32
+ v="${TAG#v}"
33
+ test "$(python3 -c 'import tomllib;print(tomllib.load(open("pyproject.toml","rb"))["project"]["version"])')" = "$v"
34
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["version"])')" = "$v"
35
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["packages"][0]["version"])')" = "$v"
36
+ test "$(python3 -c 'import json;print(json.load(open("server.json"))["packages"][0]["identifier"])')" = "panda-web-security-tools"
37
+ grep -q "__version__ = \"$v\"" src/panda_web_security_tools/__init__.py
38
+ - name: Lint (ruff)
39
+ run: |
40
+ uv run --with ruff==0.17.3 ruff format --check .
41
+ uv run --with ruff==0.17.3 ruff check .
42
+ - run: uv build
43
+ - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
44
+ with:
45
+ name: dist
46
+ path: dist/
47
+
48
+ pypi:
49
+ needs: build
50
+ runs-on: ubuntu-latest
51
+ timeout-minutes: 10
52
+ environment:
53
+ name: pypi
54
+ url: https://pypi.org/project/panda-web-security-tools/
55
+ permissions:
56
+ id-token: write
57
+ steps:
58
+ - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
59
+ with:
60
+ name: dist
61
+ path: dist/
62
+ - name: Keep only wheel and sdist
63
+ run: find dist -type f ! -name '*.whl' ! -name '*.tar.gz' -delete && ls dist
64
+ - uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3
65
+ with:
66
+ skip-existing: true
67
+
68
+ github-release:
69
+ needs: pypi
70
+ if: github.event_name == 'push'
71
+ runs-on: ubuntu-latest
72
+ timeout-minutes: 10
73
+ permissions:
74
+ contents: write
75
+ steps:
76
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
77
+ with:
78
+ persist-credentials: false
79
+ - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
80
+ with:
81
+ name: dist
82
+ path: dist/
83
+ - name: Create GitHub Release
84
+ env:
85
+ GH_TOKEN: ${{ github.token }}
86
+ run: |
87
+ # release-notes.md is a template: {{VERSION}} becomes the tag's version (no leading v).
88
+ sed "s/{{VERSION}}/${GITHUB_REF_NAME#v}/g" .github/release-notes.md > notes.md
89
+ gh release create "$GITHUB_REF_NAME" dist/* \
90
+ --repo "$GITHUB_REPOSITORY" --title "$GITHUB_REF_NAME" \
91
+ --notes-file notes.md --verify-tag --latest
panda_web_security_tools-0.1.0/.gitignore ADDED
@@ -0,0 +1,8 @@
1
+ __pycache__/
2
+ *.py[cod]
3
+ .venv/
4
+ dist/
5
+ *.egg-info/
6
+ .pytest_cache/
7
+ .mypy_cache/
8
+ .ruff_cache/
panda_web_security_tools-0.1.0/.pre-commit-config.yaml ADDED
@@ -0,0 +1,7 @@
1
+ repos:
2
+ - repo: https://github.com/astral-sh/ruff-pre-commit
3
+ rev: v0.17.3
4
+ hooks:
5
+ - id: ruff
6
+ args: [--fix]
7
+ - id: ruff-format
panda_web_security_tools-0.1.0/Dockerfile ADDED
@@ -0,0 +1,13 @@
1
+ # Runs the MCP server over stdio:
2
+ # docker build -t panda-web-security-tools .
3
+ # docker run -i --rm -e APIFY_TOKEN panda-web-security-tools
4
+ FROM python:3.13-slim
5
+
6
+ ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 PIP_NO_CACHE_DIR=1 PIP_DISABLE_PIP_VERSION_CHECK=1
7
+ WORKDIR /app
8
+ COPY pyproject.toml README.md LICENSE ./
9
+ COPY src ./src
10
+ RUN pip install . && useradd --create-home --uid 10001 mcp
11
+ USER mcp
12
+
13
+ ENTRYPOINT ["panda-web-security-tools"]
panda_web_security_tools-0.1.0/LICENSE ADDED
@@ -0,0 +1,21 @@
1
+ MIT License
2
+
3
+ Copyright (c) 2026 Panda Federation
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy
6
+ of this software and associated documentation files (the "Software"), to deal
7
+ in the Software without restriction, including without limitation the rights
8
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
+ copies of the Software, and to permit persons to whom the Software is
10
+ furnished to do so, subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in all
13
+ copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
+ SOFTWARE.
panda_web_security_tools-0.1.0/PKG-INFO ADDED
@@ -0,0 +1,105 @@
1
+ Metadata-Version: 2.5
2
+ Name: panda-web-security-tools
3
+ Version: 0.1.0
4
+ Summary: Panda Web Security Tools: site, email and agent safety: SPF/DKIM/DMARC audits, AI/SEO readiness, website change monitoring, hidden AI instructions scanner, bulk domain WHOIS/expiry.
5
+ Project-URL: Homepage, https://github.com/pandadad0214/panda-web-security-tools
6
+ Project-URL: Source, https://github.com/pandadad0214/panda-web-security-tools
7
+ Project-URL: Umbrella index, https://github.com/pandadad0214/panda-federation-tools
8
+ Project-URL: Apify Store, https://apify.com/pandadad0214
9
+ Author: Panda Federation (pandadad0214)
10
+ License-Expression: MIT
11
+ License-File: LICENSE
12
+ Keywords: apify,mcp,mcp-server,panda-federation,web-security
13
+ Classifier: Development Status :: 5 - Production/Stable
14
+ Classifier: Intended Audience :: Developers
15
+ Classifier: Programming Language :: Python :: 3
16
+ Classifier: Programming Language :: Python :: 3 :: Only
17
+ Classifier: Programming Language :: Python :: 3.11
18
+ Classifier: Programming Language :: Python :: 3.12
19
+ Classifier: Programming Language :: Python :: 3.13
20
+ Classifier: Typing :: Typed
21
+ Requires-Python: >=3.11
22
+ Requires-Dist: panda-federation-tools<2,>=1.7.0
23
+ Description-Content-Type: text/markdown
24
+
25
+ # Panda Web Security Tools
26
+
27
+ <!-- mcp-name: io.github.pandadad0214/panda-web-security-tools -->
28
+
29
+ Give Claude, Cursor or any MCP client 6 site, email and agent-safety tools: SPF/DKIM/DMARC audits, AI search and SEO checks, page change monitoring, hidden prompt-injection scans, bulk domain expiry and broken links. Each tool runs one public-data Apify Actor on your own Apify account and is priced per result (the hidden AI instructions scanner is free). Part of the [Panda Federation](https://github.com/pandadad0214/panda-federation-tools) toolkit (36 tools in four focused servers).
30
+
31
+ [![PyPI](https://img.shields.io/pypi/v/panda-web-security-tools)](https://pypi.org/project/panda-web-security-tools/)
32
+ [![Latest Release](https://img.shields.io/github/v/release/pandadad0214/panda-web-security-tools?label=latest%20release)](https://github.com/pandadad0214/panda-web-security-tools/releases/latest)
33
+ [![Umbrella](https://img.shields.io/badge/index-panda--federation--tools-blue)](https://github.com/pandadad0214/panda-federation-tools)
34
+ [![Apify Store](https://img.shields.io/badge/Apify_Store-pandadad0214-00a3ff)](https://apify.com/pandadad0214)
35
+ [![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)
36
+
37
+ ## How to use this
38
+
39
+ ```bash
40
+ uvx panda-web-security-tools
41
+ ```
42
+
43
+ 1. **Get a free Apify token** at [console.apify.com/settings/integrations](https://console.apify.com/settings/integrations) (the free plan includes $5 of monthly credit) and install [uv](https://docs.astral.sh/uv/).
44
+ 2. **Add the server to your MCP client:** command `uvx`, args `["panda-web-security-tools"]`, env `APIFY_TOKEN` (Cursor JSON below).
45
+ 3. **Ask in plain words**, e.g. "Audit the email security of acme.com and its three competitors and list the DNS fixes." Start with one or two inputs and read the `summary` / `agentSummary` line before widening.
46
+
47
+ ```json
48
+ {"mcpServers": {"panda-web-security-tools": {"command": "uvx", "args": ["panda-web-security-tools"], "env": {"APIFY_TOKEN": "apify_api_YOUR_TOKEN"}}}}
49
+ ```
50
+
51
+ ## For AI agents
52
+
53
+ | Field | Value |
54
+ | --- | --- |
55
+ | Purpose | Focused MCP server with 6 site, email and agent-safety tools: SPF/DKIM/DMARC audits, AI search and SEO checks, page change monitoring, hidden prompt-injection scans, bulk domain expiry and broken links. |
56
+ | Use when | A task needs a read-only audit of public DNS, web pages or links: email spoofing risk, AI/SEO readiness, page changes, hidden AI instructions, domain expiry or dead links. |
57
+ | Do not use when | You need penetration testing or logged-in scans (not offered), or the task is research (`panda-research-tools`), funding (`panda-public-funding-tools`) or leads (`panda-leads-tools`). |
58
+ | Install | `uvx panda-web-security-tools` (stdio, Python 3.11+) |
59
+ | Auth | `APIFY_TOKEN` env var; runs bill to that Apify account. |
60
+ | Tools | 6, listed under [Tools](#tools-6) |
61
+ | Outputs | JSON rows plus a one-line `summary` / `agentSummary`; Excel/CSV files on the Apify run. |
62
+ | Side effects and cost | Starts Apify runs; pay per result; empty runs are not charged per result; `run_max_charge_usd` caps each call. Read-only toward third-party sites. |
63
+
64
+ ## Other ways to install
65
+
66
+ From the umbrella package (same tools):
67
+
68
+ ```bash
69
+ uvx --from panda-federation-tools panda-web-security-tools
70
+ ```
71
+
72
+ From this repo instead of PyPI:
73
+
74
+ ```bash
75
+ uvx --from git+https://github.com/pandadad0214/panda-web-security-tools panda-web-security-tools
76
+ ```
77
+
78
+ Cursor / Claude / VS Code: command `uvx`, args `["panda-web-security-tools"]`, env `APIFY_TOKEN`.
79
+
80
+ Official MCP Registry name for this stdio package: `io.github.pandadad0214/panda-web-security-tools` ([server.json](server.json)). That name is separate from the hosted research server `io.github.pandadad0214/panda-research-mcp`. Registry clients install the PyPI package with `uvx panda-web-security-tools`. The git command above stays the install path from this repo.
81
+
82
+ ## Tools (6)
83
+
84
+ - `email_domain_security_checker`
85
+ - `ai_search_seo_audit`
86
+ - `website_change_monitor`
87
+ - `hidden_ai_instructions_scanner`
88
+ - `bulk_domain_whois_expiry`
89
+ - `broken_link_checker`
90
+
91
+ Each tool runs one Apify Actor on your account. Empty runs are not charged per result; every call is capped by `run_max_charge_usd`. Full schemas and prices: [umbrella README](https://github.com/pandadad0214/panda-federation-tools#domain-tool-lists).
92
+
93
+ ## Sibling domain servers
94
+
95
+ - [`panda-research-tools`](https://github.com/pandadad0214/panda-research-tools) — Scholarly integrity and papers: citation checks, literature and PubMed search, academic experts, PDF tables, Wayback Machine snapshots.
96
+ - [`panda-public-funding-tools`](https://github.com/pandadad0214/panda-public-funding-tools) — US federal money, filings and safety monitors: grants, contracts, SBIR/STTR topics, SEC financials, clinical trials, Federal Register, recalls, VIN decode.
97
+ - [`panda-leads-tools`](https://github.com/pandadad0214/panda-leads-tools) — Public leads and enrichment: NPI providers, podcasts, local businesses, hiring signals, website enrichment, team pages, topic trends, trucking carriers, IRS nonprofits, building permits, new Florida, Texas and New York businesses, H-1B visa sponsors, EU tenders.
98
+
99
+ Index / compatibility mega-server: [panda-federation-tools](https://github.com/pandadad0214/panda-federation-tools) (use only when you truly need every tool).
100
+
101
+ ## TDQS standard
102
+
103
+ New tools join this domain only while the count stays in the 3–15 band. Descriptions follow the checklist in the umbrella repo. See [tdqs-standard](https://github.com/pandadad0214/panda-federation-tools) / project docs.
104
+
105
+ Built by Panda Federation. MIT licensed.
panda_web_security_tools-0.1.0/README.md ADDED
@@ -0,0 +1,81 @@
1
+ # Panda Web Security Tools
2
+
3
+ <!-- mcp-name: io.github.pandadad0214/panda-web-security-tools -->
4
+
5
+ Give Claude, Cursor or any MCP client 6 site, email and agent-safety tools: SPF/DKIM/DMARC audits, AI search and SEO checks, page change monitoring, hidden prompt-injection scans, bulk domain expiry and broken links. Each tool runs one public-data Apify Actor on your own Apify account and is priced per result (the hidden AI instructions scanner is free). Part of the [Panda Federation](https://github.com/pandadad0214/panda-federation-tools) toolkit (36 tools in four focused servers).
6
+
7
+ [![PyPI](https://img.shields.io/pypi/v/panda-web-security-tools)](https://pypi.org/project/panda-web-security-tools/)
8
+ [![Latest Release](https://img.shields.io/github/v/release/pandadad0214/panda-web-security-tools?label=latest%20release)](https://github.com/pandadad0214/panda-web-security-tools/releases/latest)
9
+ [![Umbrella](https://img.shields.io/badge/index-panda--federation--tools-blue)](https://github.com/pandadad0214/panda-federation-tools)
10
+ [![Apify Store](https://img.shields.io/badge/Apify_Store-pandadad0214-00a3ff)](https://apify.com/pandadad0214)
11
+ [![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)
12
+
13
+ ## How to use this
14
+
15
+ ```bash
16
+ uvx panda-web-security-tools
17
+ ```
18
+
19
+ 1. **Get a free Apify token** at [console.apify.com/settings/integrations](https://console.apify.com/settings/integrations) (the free plan includes $5 of monthly credit) and install [uv](https://docs.astral.sh/uv/).
20
+ 2. **Add the server to your MCP client:** command `uvx`, args `["panda-web-security-tools"]`, env `APIFY_TOKEN` (Cursor JSON below).
21
+ 3. **Ask in plain words**, e.g. "Audit the email security of acme.com and its three competitors and list the DNS fixes." Start with one or two inputs and read the `summary` / `agentSummary` line before widening.
22
+
23
+ ```json
24
+ {"mcpServers": {"panda-web-security-tools": {"command": "uvx", "args": ["panda-web-security-tools"], "env": {"APIFY_TOKEN": "apify_api_YOUR_TOKEN"}}}}
25
+ ```
26
+
27
+ ## For AI agents
28
+
29
+ | Field | Value |
30
+ | --- | --- |
31
+ | Purpose | Focused MCP server with 6 site, email and agent-safety tools: SPF/DKIM/DMARC audits, AI search and SEO checks, page change monitoring, hidden prompt-injection scans, bulk domain expiry and broken links. |
32
+ | Use when | A task needs a read-only audit of public DNS, web pages or links: email spoofing risk, AI/SEO readiness, page changes, hidden AI instructions, domain expiry or dead links. |
33
+ | Do not use when | You need penetration testing or logged-in scans (not offered), or the task is research (`panda-research-tools`), funding (`panda-public-funding-tools`) or leads (`panda-leads-tools`). |
34
+ | Install | `uvx panda-web-security-tools` (stdio, Python 3.11+) |
35
+ | Auth | `APIFY_TOKEN` env var; runs bill to that Apify account. |
36
+ | Tools | 6, listed under [Tools](#tools-6) |
37
+ | Outputs | JSON rows plus a one-line `summary` / `agentSummary`; Excel/CSV files on the Apify run. |
38
+ | Side effects and cost | Starts Apify runs; pay per result; empty runs are not charged per result; `run_max_charge_usd` caps each call. Read-only toward third-party sites. |
39
+
40
+ ## Other ways to install
41
+
42
+ From the umbrella package (same tools):
43
+
44
+ ```bash
45
+ uvx --from panda-federation-tools panda-web-security-tools
46
+ ```
47
+
48
+ From this repo instead of PyPI:
49
+
50
+ ```bash
51
+ uvx --from git+https://github.com/pandadad0214/panda-web-security-tools panda-web-security-tools
52
+ ```
53
+
54
+ Cursor / Claude / VS Code: command `uvx`, args `["panda-web-security-tools"]`, env `APIFY_TOKEN`.
55
+
56
+ Official MCP Registry name for this stdio package: `io.github.pandadad0214/panda-web-security-tools` ([server.json](server.json)). That name is separate from the hosted research server `io.github.pandadad0214/panda-research-mcp`. Registry clients install the PyPI package with `uvx panda-web-security-tools`. The git command above stays the install path from this repo.
57
+
58
+ ## Tools (6)
59
+
60
+ - `email_domain_security_checker`
61
+ - `ai_search_seo_audit`
62
+ - `website_change_monitor`
63
+ - `hidden_ai_instructions_scanner`
64
+ - `bulk_domain_whois_expiry`
65
+ - `broken_link_checker`
66
+
67
+ Each tool runs one Apify Actor on your account. Empty runs are not charged per result; every call is capped by `run_max_charge_usd`. Full schemas and prices: [umbrella README](https://github.com/pandadad0214/panda-federation-tools#domain-tool-lists).
68
+
69
+ ## Sibling domain servers
70
+
71
+ - [`panda-research-tools`](https://github.com/pandadad0214/panda-research-tools) — Scholarly integrity and papers: citation checks, literature and PubMed search, academic experts, PDF tables, Wayback Machine snapshots.
72
+ - [`panda-public-funding-tools`](https://github.com/pandadad0214/panda-public-funding-tools) — US federal money, filings and safety monitors: grants, contracts, SBIR/STTR topics, SEC financials, clinical trials, Federal Register, recalls, VIN decode.
73
+ - [`panda-leads-tools`](https://github.com/pandadad0214/panda-leads-tools) — Public leads and enrichment: NPI providers, podcasts, local businesses, hiring signals, website enrichment, team pages, topic trends, trucking carriers, IRS nonprofits, building permits, new Florida, Texas and New York businesses, H-1B visa sponsors, EU tenders.
74
+
75
+ Index / compatibility mega-server: [panda-federation-tools](https://github.com/pandadad0214/panda-federation-tools) (use only when you truly need every tool).
76
+
77
+ ## TDQS standard
78
+
79
+ New tools join this domain only while the count stays in the 3–15 band. Descriptions follow the checklist in the umbrella repo. See [tdqs-standard](https://github.com/pandadad0214/panda-federation-tools) / project docs.
80
+
81
+ Built by Panda Federation. MIT licensed.
panda_web_security_tools-0.1.0/glama.json ADDED
@@ -0,0 +1,4 @@
1
+ {
2
+ "$schema": "https://glama.ai/mcp/schemas/server.json",
3
+ "maintainers": ["pandadad0214"]
4
+ }
panda_web_security_tools-0.1.0/pyproject.toml ADDED
@@ -0,0 +1,56 @@
1
+ [build-system]
2
+ requires = ["hatchling==1.33.0"]
3
+ build-backend = "hatchling.build"
4
+
5
+ [project]
6
+ name = "panda-web-security-tools"
7
+ version = "0.1.0"
8
+ description = "Panda Web Security Tools: site, email and agent safety: SPF/DKIM/DMARC audits, AI/SEO readiness, website change monitoring, hidden AI instructions scanner, bulk domain WHOIS/expiry."
9
+ readme = "README.md"
10
+ license = "MIT"
11
+ license-files = ["LICENSE"]
12
+ requires-python = ">=3.11"
13
+ authors = [{ name = "Panda Federation (pandadad0214)" }]
14
+ keywords = ["mcp", "mcp-server", "apify", "panda-federation", "web-security"]
15
+ classifiers = [
16
+ "Development Status :: 5 - Production/Stable",
17
+ "Intended Audience :: Developers",
18
+ "Programming Language :: Python :: 3",
19
+ "Programming Language :: Python :: 3 :: Only",
20
+ "Programming Language :: Python :: 3.11",
21
+ "Programming Language :: Python :: 3.12",
22
+ "Programming Language :: Python :: 3.13",
23
+ "Typing :: Typed",
24
+ ]
25
+ dependencies = [
26
+ "panda-federation-tools>=1.7.0,<2",
27
+ ]
28
+
29
+ [project.urls]
30
+ Homepage = "https://github.com/pandadad0214/panda-web-security-tools"
31
+ Source = "https://github.com/pandadad0214/panda-web-security-tools"
32
+ "Umbrella index" = "https://github.com/pandadad0214/panda-federation-tools"
33
+ "Apify Store" = "https://apify.com/pandadad0214"
34
+
35
+ [project.scripts]
36
+ panda-web-security-tools = "panda_web_security_tools.server:main"
37
+
38
+ [tool.hatch.build.targets.wheel]
39
+ packages = ["src/panda_web_security_tools"]
40
+
41
+ [dependency-groups]
42
+ dev = [
43
+ "ruff==0.17.3",
44
+ ]
45
+
46
+ [tool.ruff]
47
+ line-length = 120
48
+ target-version = "py311"
49
+
50
+ [tool.ruff.lint]
51
+ select = ["E", "F", "W", "I", "B", "UP", "S", "SIM", "RUF"]
52
+ ignore = ["RUF001"]
53
+
54
+ [tool.ruff.lint.per-file-ignores]
55
+ "tests/*" = ["S101", "S105", "S106"]
56
+ "**/test_*.py" = ["S101", "S105", "S106"]
panda_web_security_tools-0.1.0/scripts/lint-fix.sh ADDED
@@ -0,0 +1,19 @@
1
+ #!/usr/bin/env bash
2
+ # Run before committing (daily build routine). Autofixes then verifies clean.
3
+ set -euo pipefail
4
+ ROOT="$(cd "$(dirname "$0")/.." && pwd)"
5
+ cd "$ROOT"
6
+ RUFF_VER="${RUFF_VER:-0.17.3}"
7
+
8
+ if [[ -f uv.lock ]] && grep -q 'name = "ruff"' uv.lock; then
9
+ uv sync --frozen --all-groups
10
+ run_ruff() { uv run ruff "$@"; }
11
+ else
12
+ run_ruff() { uv run --with "ruff==${RUFF_VER}" ruff "$@"; }
13
+ fi
14
+
15
+ run_ruff check . --fix
16
+ run_ruff format .
17
+ run_ruff check .
18
+ run_ruff format --check .
19
+ echo "lint-fix: clean"
panda_web_security_tools-0.1.0/server.json ADDED
@@ -0,0 +1,33 @@
1
+ {
2
+ "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
3
+ "name": "io.github.pandadad0214/panda-web-security-tools",
4
+ "title": "Panda Web Security Tools",
5
+ "description": "Site/email/agent safety from public data: SPF/DKIM, SEO, monitor, hidden-AI, WHOIS, links (6).",
6
+ "websiteUrl": "https://github.com/pandadad0214/panda-web-security-tools",
7
+ "repository": {
8
+ "url": "https://github.com/pandadad0214/panda-web-security-tools",
9
+ "source": "github",
10
+ "id": "1447663806"
11
+ },
12
+ "version": "0.1.0",
13
+ "packages": [
14
+ {
15
+ "registryType": "pypi",
16
+ "registryBaseUrl": "https://pypi.org",
17
+ "identifier": "panda-web-security-tools",
18
+ "version": "0.1.0",
19
+ "runtimeHint": "uvx",
20
+ "transport": {
21
+ "type": "stdio"
22
+ },
23
+ "environmentVariables": [
24
+ {
25
+ "name": "APIFY_TOKEN",
26
+ "description": "Apify API token. Free token: https://console.apify.com/settings/integrations",
27
+ "isRequired": true,
28
+ "isSecret": true
29
+ }
30
+ ]
31
+ }
32
+ ]
33
+ }
panda_web_security_tools-0.1.0/src/panda_web_security_tools/__init__.py ADDED
@@ -0,0 +1,3 @@
1
+ """Panda Web Security Tools: focused MCP server for the web-security domain."""
2
+
3
+ __version__ = "0.1.0"
panda_web_security_tools-0.1.0/src/panda_web_security_tools/__main__.py ADDED
@@ -0,0 +1,4 @@
1
+ from panda_web_security_tools.server import main
2
+
3
+ if __name__ == "__main__":
4
+ main()
panda_web_security_tools-0.1.0/src/panda_web_security_tools/server.py ADDED
@@ -0,0 +1,5 @@
1
+ """Thin entry point: runs the web-security domain of panda-federation-tools."""
2
+
3
+ from panda_federation_tools.server import main_web_security as main
4
+
5
+ __all__ = ["main"]