Feranor Resilience MCP server
Scan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions.
Little public usage data yet
Reviews
Write oneNobody has reviewed Feranor Resilience yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Feranor Resilience tools (6, 2 write)
write = sends, deletes, buys or postsdomain_check_batch_v1write actionFreeRuns the full resilience check on up to 100 domains in a single call and returns the same scored report for each one: TLS certificate, security headers, DNS redundancy, response time, with every individual finding. Use it to audit a portfolio, to rank a list of vendors, or to re-check a fleet after a config rollout. A domain that cannot be reached is returned with its own error rather than failing the batch, and it is still charged, because the crawl was attempted. Do not use it for a single domain: domain_check_v1 is simpler and costs the same for one. Private, internal and localhost hostnames and IP addresses are rejected. Price: $0.01 per domain, dropping to $0.005 from 100 domains, up to 100 per call. One payment covers the whole batch (x402, USDC on Base). No signup, no API key.
domain_check_score_batch_v1FreeFree. Returns the overall resilience score out of 100 for up to 100 public web domains, plus the score of each category and how many findings each one raised. Use it to triage a portfolio: rank a list of domains, confirm which ones are healthy, or decide which ones are worth pulling the full report on. It tells you which categories are weak and how many issues they hold, but not what the issues are. A domain that cannot be reached is returned with its own error rather than failing the batch. Duplicates are removed. For the individual findings and the prioritised remediation list on a whole list, use domain_check_batch_v1. For a single domain, use domain_check_score_v1. Free, no payment required.
domain_check_score_v1FreeFree. Returns the overall resilience score out of 100 for a public web domain, plus the score of each category and how many findings each one raised. Use it to triage: to rank a list of domains, to confirm a domain is healthy, or to decide whether the detailed report is worth pulling. It tells you which categories are weak and how many issues they hold, but not what the issues are. For the individual findings and the prioritised remediation list, use domain_check_v1. Free, no payment required.
domain_check_v1FreeMeasures how resilient a public web domain is from the outside and returns a weighted score out of 100, a per-category breakdown, and prioritised findings explaining what to fix first. Use it to audit a domain you do not control, to verify a fix after deployment, or to compare several domains on the same scale. Covers TLS certificate validity and protocol version, HTTP to HTTPS redirection, HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, cache directives, response time, DNS redundancy, IPv6 availability, CDN detection and software version disclosure. Everything is read from the public internet: nothing is authenticated, no ports are scanned, and no credentials are needed. Do not use it for private, internal, or localhost hostnames, for IP addresses, or to test a service you need logged-in access to. For a free score without the detailed findings, use domain_check_score_v1 instead. Price: $0.01 per call (x402, USDC on Base). No signup, no API key.
text_purge_v1write actionFreeRemoves invisible Unicode characters and replaces homoglyphs in a text string. Returns the cleaned text plus a before-and-after comparison. Use this tool after text_scan_v1 to fix flagged issues. Price: $0.01 per call (x402, USDC on Base). No signup, no API key.
text_scan_v1FreeFree. Scans a text string for invisible Unicode characters, homoglyphs, and normalization issues. Returns a risk score and a detailed report. Use this tool before text_purge_v1 to inspect suspicious content. Free, no payment required.
Public scan report
scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 1715ms20/20
- Tool poisoning6 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
- Maintenanceno repository listed3/15
- Maintainer identityverified namespace with website, no repo4/10
Findings (2)
- highWrite-action tools reachable without authentication
auth.open-write - lowNo source repository listed
maint.no-repo
Install directly
claude mcp add --transport http resilience https://www.feranor.com/mcp
Feranor Resilience: common questions
- Is Feranor Resilience MCP server safe?
- With care: it is graded C, so read the findings first (60/100). Read the Feranor Resilience safety report
- How do I install Feranor Resilience?
- It runs remotely at www.feranor.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Feranor Resilience need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Feranor Resilience maintained?
- The latest release is v1.1.4.
- Is Feranor Resilience up?
- 100% of our last 20 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Feranor Resilience?
- Servers from other publishers that do the same job: Nel Veil MCP server, Passiv Web Tools MCP server and DNS Doctor MCP server. Compare all Feranor Resilience alternatives.
Alternatives to Feranor Resilience
Same job from other publishers: the closest match first, then the best rated.
- Nel VeilFree passive security scanning - check any domain's DMARC, TLS, headers, and exposures.not reviewedGrowingA
- Passiv Web ToolsFree web tools for AI agents: HTML to Markdown, compliance scan, page profile, security headers.not reviewedNewB
DNS DoctorScan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.not reviewedGrowingA- MCPSecurity tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.not reviewedGrowingA
- BenspdfRead PDFs locally: text, pages, metadata, scan detection, layout, permissions, render, OCR.not reviewedGrowingA