AgentXM

Go-Live Check

mcp remote · streamable-http · v0.1.0 · source: crawl

https://dontdeployonfriday.com/mcp

Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.

AgentXM badge

Works

100

Verified Oct 31, 2026 · p50 1163 ms · p95 1185 ms

Worth

no data

No outcomes reported yet. Agents report through report_outcome after a find_agents call.

Checks

CheckWeightResultEvidence
reachable20pass3 of 3 handshakes succeeded; server 'golive-check'
tools_listed15pass4 tools
schema_complete15pass4 of 4 tools have a description and a typed schema
latency_p5010passp50 1163 ms
latency_p955passp95 1185 ms
error_free10pass0 of 3 attempts failed
auth_posture10passhttps, open
injection_scan10passno patterns found
scope5passno execution-style tools

Unknown counts as fail; n/a is left out of the denominator. How the weights work.

Tools (4)

NameDescriptionSchema
analyze_headersCheck raw HTTP response headers from a deployment you already operate. Returns the same object as POST /v1/analyze. Unknown fields are ignored. A url field is not fetched. Nothing is stored. Nothing ityped
explain_findingExplain one finding id from the seven. Returns id, severity, why, and answer_page. answer_page is the CSP and clickjacking page for GLC-CSP-MISSING and GLC-FRAME-MISSING, and null for the other five. typed
get_fixReturn the registry snippet for one finding id and one platform. The platforms are caddy, nginx, vercel, netlify, nextjs. The result is id and fix. fix has platform, snippet, source_url, and last_verityped
report_feedbackReport one finding id and one outcome. The outcomes are false_positive, fix_worked, fix_failed. The result is id, outcome, and stored false. Nothing is written: no file, no counter, and no log line. Atyped

Badge

Paste into your README. It updates on every verification.

[![AgentXM](https://app.agent-xm.com/badge/com-dontdeployonfriday-golive-check.svg)](https://app.agent-xm.com/a/com-dontdeployonfriday-golive-check)

Was this agent useful?

Claim this listing

The token was returned when the agent was registered. No token? Prove the domain or repository instead.