io.github.cyanheads/attack-surface-mcp-server

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-11T12:34:23.650672Z",
      "publishedAt": "2026-11-11T12:34:23.650672Z",
      "statusChangedAt": "2026-11-11T12:34:23.650672Z"
    }
  },
  "server": {
    "name": "io.github.cyanheads/attack-surface-mcp-server",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.6.0",
    "packages": [
      {
        "version": "0.6.0",
        "transport": {
          "type": "stdio"
        },
        "identifier": "@cyanheads/attack-surface-mcp-server",
        "runtimeHint": "npx",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "SHODAN_API_KEY",
            "format": "string",
            "isSecret": true,
            "description": "Optional Shodan API key. Enables attacksurface_lookup_host; absent → that one tool returns source_unavailable and the rest of the server works."
          },
          {
            "name": "CERTSPOTTER_API_KEY",
            "format": "string",
            "isSecret": true,
            "description": "Optional Certspotter API key. Raises CT-fallback rate limits; absent → free unauthenticated tier."
          },
          {
            "name": "ATTACKSURFACE_DEFAULT_RESOLVERS",
            "format": "string",
            "default": "8.8.8.8,1.1.1.1,9.9.9.9",
            "description": "Comma-separated public DNS resolver IPs. The first also supplies discovery liveness, PTR and public DNS checks before guarded connections."
          },
          {
            "name": "ATTACKSURFACE_HTTP_USER_AGENT",
            "format": "string",
            "description": "Default User-Agent for attacksurface_probe_http (overridable per call)."
          },
          {
            "name": "ATTACKSURFACE_MAX_SUBDOMAINS",
            "format": "string",
            "default": "200",
            "description": "Map/snapshot resolution cap; enumeration also caps each page at 50 candidates."
          },
          {
            "name": "ATTACKSURFACE_RDAP_BOOTSTRAP_URL",
            "format": "string",
            "default": "https://rdap.org",
            "description": "RDAP bootstrap base URL; override for a private/mirrored RDAP."
          },
          {
            "name": "ATTACKSURFACE_ALLOW_PRIVATE_TARGETS",
            "format": "string",
            "default": "false",
            "description": "Set true to permit non-public target ranges for trusted internal-network assessment; URL and HTTP(S) scheme checks remain enforced."
          },
          {
            "name": "MCP_LOG_LEVEL",
            "format": "string",
            "default": "info",
            "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
          }
        ]
      },
      {
        "version": "0.6.0",
        "transport": {
          "url": "http://localhost:3010/mcp",
          "type": "streamable-http"
        },
        "identifier": "@cyanheads/attack-surface-mcp-server",
        "runtimeHint": "npx",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "MCP_TRANSPORT_TYPE",
            "value": "http",
            "format": "string",
            "description": "Selects the HTTP transport."
          },
          {
            "name": "MCP_HTTP_HOST",
            "format": "string",
            "default": "127.0.0.1",
            "description": "The hostname for the HTTP server."
          },
          {
            "name": "MCP_HTTP_PORT",
            "format": "string",
            "default": "3010",
            "description": "The port to run the HTTP server on."
          },
          {
            "name": "MCP_HTTP_ENDPOINT_PATH",
            "format": "string",
            "default": "/mcp",
            "description": "The endpoint path for the MCP server."
          },
          {
            "name": "MCP_AUTH_MODE",
            "format": "string",
            "default": "none",
            "description": "Authentication mode to use: 'none', 'jwt', or 'oauth'."
          },
          {
            "name": "MCP_LOG_LEVEL",
            "format": "string",
            "default": "info",
            "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/cyanheads/attack-surface-mcp-server",
      "source": "github"
    },
    "description": "Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan."
  }
}