Home/attack-surface-mcp-server
Package

attack-surface-mcp-server

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

io.github.cyanheads/attack-surface-mcp-serverSource repository
Version0.5.0latest catalog version
ConnectionPackagenpm
PublishedOct 30, 2026catalog
UpdatedOct 30, 2026catalog
Overview

What this server provides

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

Install

Packages

2
Package 1npm
@cyanheads/attack-surface-mcp-server0.5.0
Runtime npxTransport stdio
  • SHODAN_API_KEY

    Optional Shodan API key. Enables attacksurface_lookup_host; absent → that one tool returns source_unavailable and the rest of the server works.

    Format: string
    Optional
  • CERTSPOTTER_API_KEY

    Optional Certspotter API key. Raises CT-fallback rate limits; absent → free unauthenticated tier.

    Format: string
    Optional
  • ATTACKSURFACE_DEFAULT_RESOLVERS

    Comma-separated default DNS resolver IPs for attacksurface_resolve_dns.

    Format: string · Default: 8.8.8.8,1.1.1.1,9.9.9.9
    Optional
  • ATTACKSURFACE_HTTP_USER_AGENT

    Default User-Agent for attacksurface_probe_http (overridable per call).

    Format: string
    Optional
  • ATTACKSURFACE_MAX_SUBDOMAINS

    Map/snapshot resolution cap; enumeration also caps each page at 50 candidates.

    Format: string · Default: 200
    Optional
  • ATTACKSURFACE_RDAP_BOOTSTRAP_URL

    RDAP bootstrap base URL; override for a private/mirrored RDAP.

    Format: string · Default: https://rdap.org
    Optional
  • ATTACKSURFACE_ALLOW_PRIVATE_TARGETS

    Set true to permit non-public target ranges for trusted internal-network assessment; URL and HTTP(S) scheme checks remain enforced.

    Format: string · Default: false
    Optional
  • MCP_LOG_LEVEL

    Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').

    Format: string · Default: info
    Optional
Package 2npm
@cyanheads/attack-surface-mcp-server0.5.0
Runtime npxTransport streamable-http
http://localhost:3010/mcp
  • MCP_HTTP_HOST

    The hostname for the HTTP server.

    Format: string · Default: 127.0.0.1
    Optional
  • MCP_HTTP_PORT

    The port to run the HTTP server on.

    Format: string · Default: 3010
    Optional
  • MCP_HTTP_ENDPOINT_PATH

    The endpoint path for the MCP server.

    Format: string · Default: /mcp
    Optional
  • MCP_AUTH_MODE

    Authentication mode to use: 'none', 'jwt', or 'oauth'.

    Format: string · Default: none
    Optional
  • MCP_LOG_LEVEL

    Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').

    Format: string · Default: info
    Optional
View server metadata