Cookie Analyzer

Network REST API MCP

Analyze Set-Cookie header strings and return a per-cookie list of security issues, an overall 0-100 score, and recommendations. Checks Secure, HttpOnly, SameSite, expiry, path scope, sensitive names, and the __Secure-/__Host- prefix rules. One cookie per line; the "Set-Cookie:" prefix is optional.

This page documents the HTTP endpoint POST /api/tools/cookie-analyzer/execute. See the MCP reference →

Use in the browser View as Markdown

Call it over REST

POST https://api.findutils.com/api/tools/cookie-analyzer/execute · no API keys · 60 requests/min per IP

Execute — verified arguments

curl -X POST https://api.findutils.com/api/tools/cookie-analyzer/execute \
  -H "Content-Type: application/json" \
  -d '{
    "cookies": "sessionid=abc; Secure; HttpOnly; SameSite=Lax"
  }'

Parameter schema for this endpoint

curl https://api.findutils.com/api/tools/cookie-analyzer

Interactive docs · OpenAPI 3.1 spec · All REST tools

Input schema

Argument	Type	Required	Description
cookies	string	yes	One or more cookie strings, one per line (e.g. "sessionid=abc; Secure; HttpOnly; SameSite=Lax"). A leading "Set-Cookie:" is stripped.

Example arguments (verified)

{
  "cookies": "sessionid=abc; Secure; HttpOnly; SameSite=Lax"
}

Also an MCP tool

Claude, Cursor, and any MCP client can call this tool as findutils:cookie_analyzer after one connect command.

Connect once

claude mcp add findutils --transport http https://mcp.findutils.com/

Open the MCP reference for Cookie Analyzer →

More Network tools

Cidr Calculate

Compute network / broadcast / first-last host / subnet mask / hosts count for a CIDR (e.g.

Curl To Code

Returns source code that performs the same HTTP request as a cURL command, in JavaScript (fetch), Python (requests), PHP (cURL), Go (net/htt

Dns Lookup

Return the DNS records of a domain for one record type (A, AAAA, CNAME, MX, TXT, NS or SOA).

Dns Security Scanner

Return a DNS security report for a domain: SPF, DMARC, MX and CAA records with issues, a 0-100 score, a letter grade and recommendations.

Email Security Checker

Return an email-security report for the domain of an email address: MX, SPF, DKIM (common selectors), DMARC, MTA-STS, TLS-RPT and BIMI check

Har To Curl

Convert a HAR (HTTP Archive) file into curl commands, one per recorded request, and return them as a script plus a per-request list.

Http Status Code Lookup

Return the meaning, typical use case and fix for HTTP status codes.

Ip Address Lookup

Return geolocation and network details for a public IPv4 or IPv6 address: country, region, city, postal code, coordinates, timezone, ASN and