Panda Web Security Tools

Give Claude, Cursor or any MCP client 6 site, email and agent-safety tools: SPF/DKIM/DMARC audits, AI search and SEO checks, page change monitoring, hidden prompt-injection scans, bulk domain expiry and broken links. Each tool runs one public-data Apify Actor on your own Apify account and is priced per result (the hidden AI instructions scanner is free). Part of the Panda Federation toolkit (36 tools in four focused servers).

How to use this

uvx panda-web-security-tools

1. Get a free Apify token at console.apify.com/settings/integrations (the free plan includes $5 of monthly credit) and install uv.
2. Add the server to your MCP client: command uvx, args ["panda-web-security-tools"], env APIFY_TOKEN (Cursor JSON below).
3. Ask in plain words, e.g. "Audit the email security of acme.com and its three competitors and list the DNS fixes." Start with one or two inputs and read the summary / agentSummary line before widening.

{"mcpServers": {"panda-web-security-tools": {"command": "uvx", "args": ["panda-web-security-tools"], "env": {"APIFY_TOKEN": "apify_api_YOUR_TOKEN"}}}}

For AI agents

Other ways to install

From the umbrella package (same tools):

uvx --from panda-federation-tools panda-web-security-tools

From this repo instead of PyPI:

uvx --from git+https://github.com/pandadad0214/panda-web-security-tools panda-web-security-tools

Cursor / Claude / VS Code: command uvx, args ["panda-web-security-tools"], env APIFY_TOKEN.

Official MCP Registry name for this stdio package: io.github.pandadad0214/panda-web-security-tools (server.json). That name is separate from the hosted research server io.github.pandadad0214/panda-research-mcp. Registry clients install the PyPI package with uvx panda-web-security-tools. The git command above stays the install path from this repo.

Tools (6)

• email_domain_security_checker
• ai_search_seo_audit
• website_change_monitor
• hidden_ai_instructions_scanner
• bulk_domain_whois_expiry
• broken_link_checker

Each tool runs one Apify Actor on your account. Empty runs are not charged per result; every call is capped by run_max_charge_usd. Full schemas and prices: umbrella README.

Sibling domain servers

• panda-research-tools — Scholarly integrity and papers: citation checks, literature and PubMed search, academic experts, PDF tables, Wayback Machine snapshots.
• panda-public-funding-tools — US federal money, filings and safety monitors: grants, contracts, SBIR/STTR topics, SEC financials, clinical trials, Federal Register, recalls, VIN decode.
• panda-leads-tools — Public leads and enrichment: NPI providers, podcasts, local businesses, hiring signals, website enrichment, team pages, topic trends, trucking carriers, IRS nonprofits, building permits, new Florida, Texas and New York businesses, H-1B visa sponsors, EU tenders.

Index / compatibility mega-server: panda-federation-tools (use only when you truly need every tool).

TDQS standard

New tools join this domain only while the count stays in the 3–15 band. Descriptions follow the checklist in the umbrella repo. See tdqs-standard / project docs.

Built by Panda Federation. MIT licensed.