io.github.cyanheads/attack-surface-mcp-serverother

attack-surface-mcp-server

Verified · 19 days ago

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

Install

claude mcp add attack-surface-mcp-server -- npx -y @cyanheads/[email protected]

Requires: SHODAN_API_KEY, CERTSPOTTER_API_KEY, ATTACKSURFACE_DEFAULT_RESOLVERS, ATTACKSURFACE_HTTP_USER_AGENT, ATTACKSURFACE_MAX_SUBDOMAINS, ATTACKSURFACE_RDAP_BOOTSTRAP_URL, ATTACKSURFACE_ALLOW_PRIVATE_TARGETS, MCP_LOG_LEVEL

Our take

A passive reconnaissance server for external attack-surface mapping across subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, and Shodan-style data sources. It is aimed at security practitioners, asset inventory work, and lightweight exposure reviews from an assistant workflow. The feature set is relevant, but the package footprint and adoption signals suggest an early-stage project that deserves careful validation before any serious security use.

reviewed by hand · 2026-08-10

Something wrong or dead here? Report it

Verification record

last verified
19 days ago
github stars
1
last commit
21 days ago
archived
no
license
Apache-2.0
npm
@cyanheads/attack-surface-mcp-server
downloads / wk
62
latest version
0.1.1
in registry since
2026-06-14

github.com/cyanheads/attack-surface-mcp-server

More in other

browse all →
chrome-devtools-mcpother

Chrome DevTools MCP

Verified · 3 days ago

MCP server for Chrome DevTools

hand-reviewed49k starschecked 3 days ago

reactive-resumeother

Reactive Resume

Verified · 3 days ago

Free open-source resume builder with remote MCP tools for resumes and job applications.

hand-reviewed41k starschecked 3 days ago

mcp-server-commandsother

mcp-server-commands

Verified · 3 days ago

An MCP server to run arbitrary commands

hand-reviewed39k stars221 dl/wkchecked 3 days ago

mcpother

PostHog MCP Server

Verified · 5 days ago

Official PostHog MCP Server for product analytics, feature flags, experiments, and more.

hand-reviewed38k starschecked 5 days ago

mcpother

Keploy

Verified · 18 days ago

End-to-end API testing — generate and run tests from OpenAPI, curl, Postman, or real user traffic.

hand-reviewed18k starschecked 18 days ago

coderother

Coder

Verified · 19 days ago

Manage Coder workspaces, templates, and cloud development environments

hand-reviewed14k starschecked 19 days ago