AS
Attack Surface MCP Server
io.github.cyanheads/attack-surface-mcp-server
Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.
Yes, if you run it on your computer.This is a local server: your AI app launches it on your machine (Claude Desktop, Cursor, VS Code, Claude Code). Browser-only apps like ChatGPT on the web can't run it.
Connect it
{
"mcpServers": {
"attack-surface-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/attack-surface-mcp-server@0.4.0"
],
"env": {
"SHODAN_API_KEY": "<value>",
"CERTSPOTTER_API_KEY": "<value>"
}
}
}
}claude mcp add attack-surface-mcp-server -- npx -y @cyanheads/attack-surface-mcp-server@0.4.0Change history
Alternatives in Developer Tools
Compare →
Context7A
Up-to-date code docs for any prompt
AAAirbyte AgentsOfficialA
Let AI agents query data and act across all your business apps via MCP.
VirusTotalOfficialA
Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.
NENetdataA
Real-time infrastructure monitoring with metrics, logs, alerts, and ML-based anomaly detection.
OMOmnaraA
Deploy durable AI agents with Omnara, an open-source managed-agent platform.
RDRevoGrid DataGrid MCPA
Token-free MCP server for structured RevoGrid Core, Pro, and Enterprise knowledge retrieval.