KitScout

Categories › Security › Code & dependency scanning

Quiet Failures

MCP serverVerified domain · quietfailures.comRemote● LiveFree to try

Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.

Install

Remote server: your requests and data go to mcp.quietfailures.com. Claude Code: claude mcp add --transport http quiet-failures https://mcp.quietfailures.com/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

  • list_base_rates — Catalog of all published Quiet Failures base rates: metric id, the global question, the current global figure, sample size, severity, and ev
  • find_base_rate — Search the Quiet Failures base rates by keyword (e.g. "dmarc", "certificate expiry uk", "subdomain takeover"). Returns matching metrics and
  • get_base_rate — Full detail for one Quiet Failures base rate segment: the figure with confidence interval, how it is measured, why it matters, the limits of
  • check_email_auth — Live SPF, DKIM and DMARC audit of up to 50 domains the user owns or asks about. Returns a per-domain breakdown plus a portfolio grade. Compa
  • check_subdomain_takeover — Live scan of one domain: enumerate its subdomains (CT logs + DNS), then test each for dangling references on 13 cloud providers. Slow on lar
  • check_whois — Live WHOIS lookup for up to 100 domains: expiry date, registrar, nameservers. Use to catch registrations about to lapse. Rate-limited per cl

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

  • ponytail-audit 190,451 ★
    Quality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most imp
  • ponytail-debt 190,451 ★
    Harvest every shortcut: comment into one debt ledger, so deferrals get tracked instead of forgotten. One-shot
  • security-and-hardening 117,221 ★
    Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling us
  • deal-with-security-advisory 113,505 ★
    Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, pr
  • html-ppt-knowledge-arch-blueprint