MCP.Market

Detectzestack MCP server

by mlugo-apx·io.github.mlugo-apx/detectzestack-mcp·v1.1.1
No reviews yet

Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
New

0 stars9 downloads/wk

Reviews

Write one

Nobody has reviewed Detectzestack yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Detectzestack tools (9)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • check_security_headers
  • check_ssl_certificate

    Inspect the SSL/TLS certificate for a domain. Returns TLS version, cipher suite, certificate subject/issuer, validity dates, days remaining until expiry, SAN entries, chain of trust, and more. Results cached for 24 hours. Args: - url (string, required): Domain to check (e.g., "stripe.com") Returns: JSON with: domain, ip, port, tls (version, cipher_suite, negotiated_protocol), certificate (subject,

  • check_technology
  • compare_stacks

    Compare the technology stacks of 2 to 10 websites. Returns shared technologies, unique technologies per site, and full tech details for each domain. Each URL in the list counts as one API credit toward your monthly limit. Args: - urls (string[], required): Array of 2-10 website URLs or domains to compare Returns: JSON with: domains array (url, domain, technologies, unique techs, errors), shared (t

  • detect_tech_stack

    Detect all technologies used by a website. Returns frameworks, CMS platforms, analytics tools, CDNs, hosting providers, and more. Results are cached server-side for 24 hours. Args: - url (string, required): Website URL or domain (e.g., "stripe.com" or "https://stripe.com") Returns: JSON with: url, domain, technologies array (name, version, categories, confidence, cpe), categories grouped by type,

  • dns_lookup

    Perform a comprehensive DNS lookup for a domain. Returns A, AAAA, CNAME, MX, NS, TXT, SOA, and PTR records resolved in parallel. Also includes SPF/DMARC/DKIM email security analysis. Args: - domain (string, required): Domain to look up (e.g., "stripe.com"). Must be a bare domain, not a full URL. Returns: JSON with: domain, a (IPv4 addresses), aaaa (IPv6), cname, mx (host + priority), ns (nameserve

  • lookup_by_technology
  • scan_vulnerabilities
  • site_profile

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Detectzestack compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 68% of 915 Security servers
Tools
9
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
9
more than 1% of 248 Security servers with a package

What its tools let an agent do: 9 read

Install Detectzestack in Claude Code, Cursor or VS Code

Runs npx -y detectzestack-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add detectzestack-mcp -- npx -y detectzestack-mcp
Add to Cursor

What the publisher says

From the Detectzestack repository's README, as published. We do not edit it. Read it on GitHub

DetectZeStack MCP Server

An MCP (Model Context Protocol) server that lets AI agents detect technology stacks, analyze security headers, inspect SSL certificates, look up DNS records, and scan for vulnerabilities on any website.

Quick Start

Claude Code

Add to .mcp.json in your project root (or ~/.claude/.mcp.json for global):

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}

Get Your API Key

Either:

  • Direct: sign up at detectzestack.com/signup (free tier: 100 requests/month) and set DETECTZESTACKAPIKEY, or
  • RapidAPI: subscribe at DetectZeStack on RapidAPI and set RAPIDAPI_KEY.

Alternative API Providers

Instead of RapidAPI, you can use API.market or a direct API key:

API.market:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "APIMARKET_KEY": "your-apimarket-key"
      }
    }
  }
}

Direct API Key:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "DETECTZESTACK_API_KEY": "your-api-key"
      }
    }
  }
}

Provider priority: RAPIDAPIKEY > APIMARKETKEY > DETECTZESTACKAPIKEY

Available Tools

Example Prompts

Once configured, ask your AI agent:

  • "What technologies does stripe.com use?"
  • "Does shopify.com use React?"
  • "Check the security headers of my-site.com"
  • "Is the SSL certificate for example.com about to expire?"
  • "Look up DNS records for gmail.com"
  • "Scan my-app.com for known vulnerabilities"
  • "Compare the tech stacks of stripe.com and square.com"
  • "Give me a full site profile of github.com"

Pricing

View pricing (same plans on RapidAPI)

Links

  • DetectZeStack Website
  • API Documentation
  • RapidAPI Listing
  • Report Issues

License

MIT

Nothing above is checked by us. What we check is on the safety report.

Detectzestack: common questions

Is Detectzestack MCP server safe?
Mostly: it is graded B (83/100). Read the Detectzestack safety report
How do I install Detectzestack?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Detectzestack need an API key?
Yes. The registry entry asks for DETECTZESTACK_API_KEY, RAPIDAPI_KEY, APIMARKET_KEY.
Is Detectzestack maintained?
The last commit was 38 days ago (2026-09-27). The latest release is v1.1.1.
What can I use instead of Detectzestack?
Servers from other publishers that do the same job: Dechonet MCP server, Security Suite MCP server and Bawbel Scanner MCP server.
How does Detectzestack compare with other Security MCP servers?
safety score 83/100 (higher than 68% of 915 Security servers); tools 9 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Detectzestack

Same job from other publishers: the closest match first, then the best rated.

  • Dechonet
    30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
    A
  • Security Suite
    Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
    More from 4hmetuyar →
    A
  • Bawbel Scanner
    Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
    B
  • Trent
    Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
    A
  • Security Suite
    Every GuardBee MCP security tool in one server: OWASP MCP Top 10, secrets, supply chain, TLS/DNS
    More from GuardBee →
    A