# EverThread

> EverThread watches a website and emails the owner in plain English when something needs fixing. Daily checks of the certificate, security headers, scripts, forms, hidden frames, redirects, exposed files and injected spam, with a browser-based reviewer on paid plans. Free plan watches the certificate. Paid plans from $5/month.

## For agents and tools

- Free check, no key: `GET https://security.everthread.live/api/v1/check?url=<site>` returns a JSON report card for the home page (verdict, headline, items with what/why/fix). A few checks per address per half hour; results cached for a day. Send `X-EverThread-Source: <your-tool>` so we can see where checks come from.
- CLI: `npx everthread check <site>` prints the same card in the terminal. `--json` for machines, `--fail-on urgent` for CI.
- MCP server: `npx -y everthread mcp` (tools: check_site, explain_finding, list_findings).
- Explanations: `GET https://security.everthread.live/api/v1/explain/<type>` and https://everthread.live/fix/ (one page per finding, plain English).
- OpenAPI: https://everthread.live/openapi.json
- Sign up (free): https://security.everthread.live/signup?site=<host>

## Rules we follow

Observation only. We load pages the way a browser does. We never log in, probe for hidden paths beyond a fixed handful of well-known files, or run exploit tooling. Public results never include the exact address of an exposed file; the site owner sees that in their dashboard.

## Pages

- https://everthread.live/ — what it does and the free check
- https://everthread.live/fix/ — every finding explained
- https://everthread.live/api — API documentation
- https://everthread.live/privacy.html