Quiet Failures
Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.
Connect it
Settings → Connectors → Add custom connector
URL: https://mcp.quietfailures.com/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://mcp.quietfailures.com/mcp{
"mcpServers": {
"quiet-failures": {
"url": "https://mcp.quietfailures.com/mcp"
}
}
}claude mcp add --transport http quiet-failures https://mcp.quietfailures.com/mcp{
"servers": {
"quiet-failures": {
"type": "http",
"url": "https://mcp.quietfailures.com/mcp"
}
}
}6 tools, verified live
list_base_ratesread-onlyCatalog of all published Quiet Failures base rates: metric id, the global question, the current global figure, sample size, severity, and every published segment slug (valid `segment` values for get_base_rate). Use get_base_rate for full detail on one.
find_base_rateread-onlySearch the Quiet Failures base rates by keyword (e.g. "dmarc", "certificate expiry uk", "subdomain takeover"). Returns matching metrics and their most citable segments.
get_base_rateread-onlyFull detail for one Quiet Failures base rate segment: the figure with confidence interval, how it is measured, why it matters, the limits of the measurement, the recent time series, and the canonical source URL to cite. Segment defaults to "global"; country slugs (gb, fr, usâ¦) and company cuts (gb-companies, gb-smallâ¦) are also published.
check_email_authread-onlyLive SPF, DKIM and DMARC audit of up to 50 domains the user owns or asks about. Returns a per-domain breakdown plus a portfolio grade. Compare against the base rates: most of the web fails these controls. Rate-limited per client.
check_subdomain_takeoverread-onlyLive scan of one domain: enumerate its subdomains (CT logs + DNS), then test each for dangling references on 13 cloud providers. Slow on large domains (up to a few minutes). Rate-limited per client.
check_whoisread-onlyLive WHOIS lookup for up to 100 domains: expiry date, registrar, nameservers. Use to catch registrations about to lapse. Rate-limited per client.
Alternatives in Security
Compare →WMWHOOP — MissingMCPB
WHOOP recovery, strain, sleep and workouts in Claude via official WHOOP OAuth. Free, open source.
THThoughtspotB
MCP Server for ThoughtSpot - provides OAuth authentication and tools for querying data
VCVITNA – Containment for rogue AI agentsB
Guard wraps stdio MCP servers: risky calls wait for a person; no answer, no run. Remote: cooperative
SXSputnik X — AI-Agent-Native IntelligenceB
Sputnik X: 16 free MCP tools and EU Trade via authenticated REST and x402.
MAC Address LookupB
Find the organization behind a MAC address or OUI prefix in the IEEE registries. No auth, no key.
VPVPSnetB
Manage VPSnet servers, apps, private networks and Functions with authorized customer access.