Security testing · 1 free pick · premium superpower

Own-site checks: check your own live site

Missing security headers and weak HTTPS settings are common on small sites. Many people are also not sure what they may test: only sites they own or have permission to test. A browser add-on lets the assistant look at your live site and its responses.

Free picks (tested by us)

Most useful first. Each one was installed on a clean test system; start with the first, try it, then add the next.

  1. RecommendedconnectorPartly tested (needs an account)

    Control a browser

    Playwright MCP

    Lets your assistant open web pages and click and type like you do.

    Test: installs cleanly; its main features need an account we did not use. Not yet used on real work.

    Good forWeb developers, Build an app, Daily work and researchWatch outIt controls a real browser and can open any web address, fill forms and click buttons. Do not point it at pages where a click can cost money or send messages.

    For Claude Code Also works with Codex CLI and Gemini CLI — see all steps
    Paste this in the terminal
    claude mcp add playwright npx @playwright/mcp@latest
    Other ways to install, and how we tested it

Superpowers Pack · early access

Premium superpowers in the Superpowers Pack

  • Premium superpower

    Pre-launch check of your own site

    Confirms the site is yours, then checks headers, HTTPS and open data and explains each fix for your host.

Superpowers written and tested by us, set up with one command. Early access: join the list and we email you the day it opens.

Get early access