MCP Server MCP

io.github.cyanheads/attack-surface-mcp-server

By github 👁 1 views ▲ 0 votes

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

Homepage Verified source GitHub

Install

npx -y @cyanheads/[email protected]

Configuration Example

{
  "remotes": [],
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "@cyanheads/attack-surface-mcp-server",
      "version": "0.2.0",
      "runtimeHint": "bun",
      "transport": {
        "type": "stdio"
      },
      "packageArguments": [
        {
          "value": "run",
          "type": "positional"
        },
        {
          "value": "start:stdio",
          "type": "positional"
        }
      ],
      "environmentVariables": [
        {
          "description": "Optional Shodan API key. Enables attacksurface_lookup_host; absent → that one tool returns source_unavailable and the rest of the server works.",
          "format": "string",
          "isSecret": true,
          "name": "SHODAN_API_KEY"
        },
        {
          "description": "Optional Certspotter API key. Raises CT-fallback rate limits; absent → free unauthenticated tier.",
          "format": "string",
          "isSecret": true,
          "name": "CERTSPOTTER_API_KEY"
        },
        {
          "description": "Comma-separated default DNS resolver IPs for attacksurface_resolve_dns.",
          "format": "string",
          "default": "8.8.8.8,1.1.1.1,9.9.9.9",
          "name": "ATTACKSURFACE_DEFAULT_RESOLVERS"
        },
        {
          "description": "Default User-Agent for attacksurface_probe_http (overridable per call).",
          "format": "string",
          "name": "ATTACKSURFACE_HTTP_USER_AGENT"
        },
        {
          "description": "Cap on subdomains resolved during a map_domain run.",
          "format": "string",
          "default": "200",
          "name": "ATTACKSURFACE_MAX_SUBDOMAINS"
        },
        {
          "description": "RDAP bootstrap base URL; override for a private/mirrored RDAP.",
          "format": "string",
          "default": "https://rdap.org",
          "name": "ATTACKSURFACE_RDAP_BOOTSTRAP_URL"
        },
        {
          "description": "Set true to disable the SSRF guard for internal-network assessment (local/trusted deployments only).",
          "format": "string",
          "default": "false",
          "name": "ATTACKSURFACE_ALLOW_PRIVATE_TARGETS"
        },
        {
          "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').",
          "format": "string",
          "default": "info",
          "name": "MCP_LOG_LEVEL"
        }
      ]
    },
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "@cyanheads/attack-surface-mcp-server",
      "version": "0.2.0",
      "runtimeHint": "bun",
      "transport": {
        "type": "streamable-http",
        "url": "http://localhost:3010/mcp"
      },
      "packageArguments": [
        {
          "value": "run",
          "type": "positional"
        },
        {
          "value": "start:http",
          "type": "positional"
        }
      ],
      "environmentVariables": [
        {
          "description": "The hostname for the HTTP server.",
          "format": "string",
          "default": "127.0.0.1",
          "name": "MCP_HTTP_HOST"
        },
        {
          "description": "The port to run the HTTP server on.",
          "format": "string",
          "default": "3010",
          "name": "MCP_HTTP_PORT"
        },
        {
          "description": "The endpoint path for the MCP server.",
          "format": "string",
          "default": "/mcp",
          "name": "MCP_HTTP_ENDPOINT_PATH"
        },
        {
          "description": "Authentication mode to use: 'none', 'jwt', or 'oauth'.",
          "format": "string",
          "default": "none",
          "name": "MCP_AUTH_MODE"
        },
        {
          "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').",
          "format": "string",
          "default": "info",
          "name": "MCP_LOG_LEVEL"
        }
      ]
    }
  ]
}

mcp model-context-protocol npm