Attack Surface MCP server

by cyanheads·io.github.cyanheads/attack-surface-mcp-server·v0.2.1

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

What users say

No reviews yet

Safety scan

not scanned yet

Adoption

Not measured yet

Usage numbers are collected on the next scan

Reviews

Nobody has reviewed Attack Surface yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New registry listings are scanned within a day of import.

Runs npx -y @cyanheads/attack-surface-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add attack-surface-mcp-server -- npx -y @cyanheads/attack-surface-mcp-server

Is Attack Surface MCP server safe?: Not known yet: the safety scan has not run. New listings are scanned within a few days.
How do I install Attack Surface?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Attack Surface need an API key?: Yes. The registry entry asks for SHODAN_API_KEY, CERTSPOTTER_API_KEY.
Is Attack Surface maintained?: The latest release is v0.2.1.

Local package. It runs on your machine, not through the gateway.

SHODAN_API_KEYsecretOptional Shodan API key. Enables attacksurface_lookup_host; absent → that one tool returns source_unavailable and the rest of the server works.
CERTSPOTTER_API_KEYsecretOptional Certspotter API key. Raises CT-fallback rate limits; absent → free unauthenticated tier.
ATTACKSURFACE_DEFAULT_RESOLVERSComma-separated default DNS resolver IPs for attacksurface_resolve_dns.
ATTACKSURFACE_HTTP_USER_AGENTDefault User-Agent for attacksurface_probe_http (overridable per call).
ATTACKSURFACE_MAX_SUBDOMAINSCap on subdomains resolved during a map_domain run.
ATTACKSURFACE_RDAP_BOOTSTRAP_URLRDAP bootstrap base URL; override for a private/mirrored RDAP.
ATTACKSURFACE_ALLOW_PRIVATE_TARGETSSet true to disable the SSRF guard for internal-network assessment (local/trusted deployments only).
MCP_LOG_LEVELSets the minimum log level for output (e.g., 'debug', 'info', 'warn').
MCP_HTTP_HOSTThe hostname for the HTTP server.
MCP_HTTP_PORTThe port to run the HTTP server on.
MCP_HTTP_ENDPOINT_PATHThe endpoint path for the MCP server.
MCP_AUTH_MODEAuthentication mode to use: 'none', 'jwt', or 'oauth'.
MCP_LOG_LEVELSets the minimum log level for output (e.g., 'debug', 'info', 'warn').

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/cyanheads-attack-surface-mcp-server.svg)](https://mcp.market/server/cyanheads-attack-surface-mcp-server)