Attack Surface Mcp Server

Overview

Attack Surface Mcp Server provides passive external attack-surface mapping through a Model Context Protocol interface. It integrates certificate transparency subdomain discovery, DNS reconnaissance, TLS analysis, HTTP posture assessment, RDAP/WHOIS lookups, and Shodan queries. Any MCP-compatible AI assistant can invoke these capabilities directly, letting the model decide when to employ them during conversations or agent operations.

The server runs locally via the npm package @cyanheads/attack-surface-mcp-server, installed with npx -y @cyanheads/attack-surface-mcp-server. It communicates over stdio and requires an API key for authentication. Version v0.2.1 is released under the Apache-2.0 license with source code available at cyanheads/attack-surface-mcp-server on GitHub.

Attack Surface Mcp Server is categorized under AI & Agents and works with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed and others. Maintainers from cyanheads are invited to claim this listing to verify ownership and keep information up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "attack_surface_mcp_server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/attack-surface-mcp-server"
      ]
    }
  }
}