
KrakenShield MCP server
Which MCP servers are KrakenShield's own, from the official registry and from asking its own domain, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.
read 2026-10-27
- Registry nameeu.krakenshield/krakenshieldverified in the MCP registry
The registry name sits under krakenshield.eu. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.
- Stateanswerschecked 2026-10-27
- Tools3
- Server calls itselfkrakenshield
- Server version1.0.0
- Protocol version2025-06-18
On 2026-10-27 the server answered initialize and tools/list without a sign-in. First answer in 530 ms.
- Whether its tools do the product's job has not been judged yet.
Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.
- INITE MCP score100 of 100answers 100 · definitions 100 · context 100 · connects 100
- Answered100% of days7 of 7 daily checks
- Median first answer535 ms
- Space in an agent's context≈ 514 tokensthe definitions of all its tools (3), which an agent carries on every turn
- Tool definitionsA · 100 of 100
- Typed results0 of 3 toolsdeclared outputSchema: results come typed, read once
- Every tool passes all six checks.
What an agent can do with it
- not sure · grade a domain's SSL/TLS setup and security headers
- cannot · audit cookies and trackers before and after consent
- not sure · scan source code for secrets and vulnerable dependencies
Each of the product's use cases, put to Jev against this server's tool list: can an agent do it with these tools?
Worth a look
None of the five warning signs in these definitions.
A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (25%), doing the product's job (25%), definitions (20%), context (10%), use (10%) and how readily a client connects (10%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →
check_sslChecks the HTTPS setup of a public website in a few seconds: TLS certificate (issuer, expiry, trust, name), negotiated TLS version, redirect from HTTP to HTTPS and security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options…
search_cyber_knowledgeSearches the free KrakenShield Knowledge Center: cybersecurity glossary, acronyms, security certifications (CISSP, OSCP, ISO 27001...) and the "Cyber from A to Z" guide. Returns short passages with the URL of each page to cite. Use a few…
get_pricingCurrent prices of KrakenShield: cost of each audit (SSL/TLS and surface, privacy, code analysis, penetration test) and of Cyber Academy training in Kredits, and the price of Kredit packs in euros excluding VAT.
How to connect
Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:
{
"mcpServers": {
"krakenshield": {
"type": "http",
"url": "https://api.krakenshield.eu/mcp"
}
}
}Add it
Claude Code, in a terminal
claude mcp add --transport http krakenshield https://api.krakenshield.eu/mcpclaude.ai, ChatGPT and other clients: add https://api.krakenshield.eu/mcp as a custom connector in the settings.
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.