Skip to main content
Glama
RuoJi6

FOFA Quake Hunter MCP Server

by RuoJi6

hunter_search

Search the Hunter cyberspace mapping platform to discover web and non-web assets using field-based queries with fuzzy/exact matching and logical operators.

Instructions

Search Hunter (奇安信鹰图) cyberspace mapping platform. Requires HUNTER_KEY environment variable. Query syntax: field="value" format. Matching operators: = (fuzzy match), == (exact match), != (fuzzy exclude), !== (exact exclude). Logical operators: && (AND), || (OR). Examples: web.body="keyword", web.title=="login", domain="example.com" && web.status_code="200", ip!="1.1.1.1". Supports filtering by asset type: web assets, non-web assets, or all. Supports time range filtering (querying beyond 30 days will consume extra credits).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
queryYesHunter search query. Matching operators: = (fuzzy), == (exact), != (fuzzy exclude), !== (exact exclude). Logical: && (AND), || (OR). Examples: web.body="keyword", web.title=="login", domain="example.com" && ip!="1.1.1.1", (web.title="admin" || web.title="login") && ip!=""
pageNoPage number, starting from 1 (default: 1)
page_sizeNoResults per page (default: 10, valid values: 10, 50, 100). IMPORTANT: If user specifies a number (e.g., '查询10个', 'find 5 results'), choose the closest valid value (10, 50, or 100). For 1-30 use 10, for 31-75 use 50, for 76+ use 100.
is_webNoAsset type filter: 1=only web assets (websites, web services), 2=only non-web assets (databases, IoT devices, etc.), 3=all assets (default: 3)
status_codeNoHTTP status codes filter (e.g., '200,301')
fieldsNoComma-separated fields to return. Available: ip,port,domain,ip_tag,url,web_title,is_risk_protocol,protocol,base_protocol,status_code,os,company,number,icp_exception,country,province,city,is_web,isp,as_org,cert_sha256,ssl_certificate,component,asset_tag,updated_at,header,header_server,banner. If not specified, returns all fields.
start_timeNoQuery start time in format: 2021-01-01 (YYYY-MM-DD). Note: Querying beyond 30 days will consume extra credits.
end_timeNoQuery end time in format: 2021-03-01 (YYYY-MM-DD). Note: Querying beyond 30 days will consume extra credits.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It does well by mentioning the authentication requirement (HUNTER_KEY), cost implications (extra credits for queries beyond 30 days), and query syntax rules. However, it doesn't mention rate limits, pagination behavior beyond the parameters, or error handling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is appropriately sized and front-loaded with essential information. It efficiently covers authentication, query syntax, operators, examples, asset types, and time filtering in a single paragraph. Every sentence adds value, though some information about parameters is redundant with the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a search tool with 8 parameters, 100% schema coverage, but no output schema or annotations, the description provides adequate context about authentication, query syntax, and cost implications. However, it doesn't describe the return format, result structure, or error scenarios, leaving gaps for an AI agent to understand the full tool behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 100% schema description coverage, the baseline is 3. The description adds some value by explaining query syntax with examples and mentioning time range filtering implications, but doesn't provide significant additional parameter semantics beyond what's already well-documented in the schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool searches the Hunter cyberspace mapping platform with specific query syntax. It distinguishes from siblings by mentioning Hunter specifically, but doesn't explicitly differentiate from fofa_search or quake_search in terms of when to use each platform.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the HUNTER_KEY environment variable requirement and provides query syntax examples, but doesn't explicitly state when to use this tool versus the sibling fofa_search or quake_search tools. It provides some context about time range filtering and credit consumption, but lacks explicit guidance on tool selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/RuoJi6/fofa_quake_hunter_mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server