Skip to main content
Glama
RuoJi6

FOFA Quake Hunter MCP Server

by RuoJi6

quake_search

Search the Quake 360 cyberspace mapping platform to discover assets, ports, and services using field-based queries with logical operators for security research and reconnaissance.

Instructions

Search Quake 360 cyberspace mapping platform using scroll API (supports deep pagination). Requires QUAKE_KEY environment variable. Query syntax: field:value format (e.g., port:443, title:"keyword"). Logical operators: AND, OR, NOT (uppercase). Examples: port:443, ip:1.1.1.1 AND port:80, service:http AND NOT response:"baidu". IMPORTANT: Use 'include' parameter to specify which fields to return. NOTE: Field names must be exact - use 'asn' and 'org' (NOT 'as_org'), use specific component fields like 'components.product_name_cn' (NOT just 'components'). Supports pagination_id for getting more pages.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
queryYesQuake search query using colon syntax. Logical operators: AND, OR, NOT (uppercase). Examples: title:"后台管理", port:3389 AND country:"China", port:80 AND NOT response:"baidu", domain:example.com OR domain:test.com
sizeNoNumber of results to return per page (default: 100, larger size = longer request time). IMPORTANT: If user specifies a number (e.g., '查询10个', 'find 5 results'), use that number as size value.
pagination_idNoPagination ID from previous response. Use this to get next page. Expires in 5 minutes. Leave empty for first request.
includeNoComma-separated fields to include. REGISTERED USERS can use: ip, port, hostname, transport, asn, org, service.name, location.country_cn, location.province_cn, location.city_cn, service.http.host, service.http.title, service.http.server. MEMBER USERS can additionally use: time, domain, service.response, service.cert, components.product_catalog, components.product_type, components.product_level, components.product_vendor, location.country_en, location.province_en, location.city_en, location.district_en, location.district_cn, location.isp, service.http.body, components.product_name_cn, components.version, service.http.infomation.mail, service.http.favicon.hash, service.http.favicon.data, service.http.status_code. IMPORTANT: Use exact field names - 'asn' and 'org' (NOT 'as_org'), specific component fields like 'components.product_name_cn' (NOT 'components'). Example: 'ip,port,service.http.title,org,asn' for basic info with organization.
excludeNoComma-separated fields to exclude from results
ignore_cacheNoWhether to ignore cache (default: false)
latestNoWhether to use latest data (default: true)
start_timeNoQuery start time in format: 2020-10-14 00:00:00 (UTC timezone)
end_timeNoQuery end time in format: 2020-10-14 00:00:00 (UTC timezone)
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden and does an excellent job disclosing behavioral traits. It specifies authentication requirements (QUAKE_KEY environment variable), pagination behavior (scroll API with pagination_id expiring in 5 minutes), query syntax rules, field naming conventions, and user tier limitations for the 'include' parameter. The only minor gap is lack of explicit rate limit information.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is appropriately front-loaded with core functionality, but becomes somewhat dense with multiple examples, syntax rules, and field naming conventions in a single paragraph. While all information is valuable, the structure could be improved with better organization or bullet points for readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex search tool with 9 parameters and no annotations or output schema, the description provides substantial context about authentication, query syntax, pagination behavior, field naming rules, and user tier limitations. The main gap is lack of information about return format or result structure, which would be helpful given no output schema exists.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, providing comprehensive parameter documentation. The description adds some value by emphasizing the importance of the 'include' parameter and providing field naming examples, but doesn't significantly enhance parameter understanding beyond what's already in the schema. This meets the baseline for high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool searches the 'Quake 360 cyberspace mapping platform using scroll API (supports deep pagination)', which is a specific verb (search) and resource (Quake 360 platform). It distinguishes from sibling tools like fofa_search and hunter_search by explicitly naming the platform and API method.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context about when to use this tool (searching Quake 360 platform with scroll API for deep pagination) and mentions the QUAKE_KEY environment variable requirement. However, it doesn't explicitly state when NOT to use it or provide direct alternatives to sibling tools, though the platform specificity implies differentiation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/RuoJi6/fofa_quake_hunter_mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server