Categories › Security › Code & dependency scanning
Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.
Remote server: your requests and data go to mcp.quietfailures.com. Claude Code: claude mcp add --transport http quiet-failures https://mcp.quietfailures.com/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
list_base_rates — Catalog of all published Quiet Failures base rates: metric id, the global question, the current global figure, sample size, severity, and evfind_base_rate — Search the Quiet Failures base rates by keyword (e.g. "dmarc", "certificate expiry uk", "subdomain takeover"). Returns matching metrics and get_base_rate — Full detail for one Quiet Failures base rate segment: the figure with confidence interval, how it is measured, why it matters, the limits ofcheck_email_auth — Live SPF, DKIM and DMARC audit of up to 50 domains the user owns or asks about. Returns a per-domain breakdown plus a portfolio grade. Compacheck_subdomain_takeover — Live scan of one domain: enumerate its subdomains (CT logs + DNS), then test each for dangling references on 13 cloud providers. Slow on larcheck_whois — Live WHOIS lookup for up to 100 domains: expiry date, registrar, nameservers. Use to catch registrations about to lapse. Rate-limited per clNot tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.