io.github.cyanheads/attack-surface-mcp-serverother

attack-surface-mcp-server

Verified · 7 days ago

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

Install

claude mcp add attack-surface-mcp-server -- npx -y @cyanheads/[email protected]

Requires: SHODAN_API_KEY, CERTSPOTTER_API_KEY, ATTACKSURFACE_DEFAULT_RESOLVERS, ATTACKSURFACE_HTTP_USER_AGENT, ATTACKSURFACE_MAX_SUBDOMAINS, ATTACKSURFACE_RDAP_BOOTSTRAP_URL, ATTACKSURFACE_ALLOW_PRIVATE_TARGETS, MCP_LOG_LEVEL

Our take

A passive reconnaissance server for external attack-surface mapping across subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, and Shodan-style data sources. It is aimed at security practitioners, asset inventory work, and lightweight exposure reviews from an assistant workflow. The feature set is relevant, but the package footprint and adoption signals suggest an early-stage project that deserves careful validation before any serious security use.

reviewed by hand · 2026-08-10

Something wrong or dead here? Report it

Verification record

last verified
7 days ago
github stars
1
last commit
13 days ago
archived
no
license
Apache-2.0
downloads / wk
262
latest version
0.2.2
in registry since
2026-06-14

github.com/cyanheads/attack-surface-mcp-server

front-end-checklistother

Front-End Checklist

Verified · 4 days ago

Review frontend code and live pages against 386 quality-gated web development rules.

hand-reviewed74k starschecked 4 days ago

chrome-devtools-mcpother

Chrome DevTools MCP

Verified · 18 days ago

MCP server for Chrome DevTools

hand-reviewed52k stars1.5m dl/wkchecked 18 days ago

reactive-resumeother

Reactive Resume

Verified · 18 days ago

Free open-source resume builder with remote MCP tools for resumes and job applications.

hand-reviewed43k starschecked 18 days ago

PostHog MCP Server

Verified · 22 days ago

Official PostHog MCP Server for product analytics, feature flags, experiments, and more.

hand-reviewed40k starschecked 22 days ago

mcp-server-commandsother

mcp-server-commands

Verified · 19 days ago

An MCP server to run arbitrary commands

hand-reviewed39k stars138 dl/wkchecked 19 days ago

openworkother

OpenWork MCP Gateway

Verified · 9 days ago

Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.

hand-reviewed24k starschecked 9 days ago