Skip to main content
Glama
Sign In
cyanheads

attack-surface-mcp-server

by cyanheads
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Hybrid

Related Servers

Alternatives to attack-surface-mcp-server

No user-submitted related servers found.

    Related Servers

    • osint-mcp-server

      robyroro
      A
      license
      A
      quality
      A
      maintenance
      Provides passive OSINT reconnaissance for domains and IPs using public sources, with tools for WHOIS/RDAP, DNS, subdomain enumeration, Wayback Machine, HTTP headers, Shodan InternetDB, email security, TLS certificates, and ASN lookups, all without requiring API keys.
      15
      54 PyPI
      MIT

    • nirikshak

      ewwhardik
      A
      license
      Not graded
      quality
      D
      maintenance
      MCP server for passive domain reconnaissance and attack surface monitoring. It scans subdomains, security headers, TLS certs, and tech stack, detects subdomain takeovers, and reports changes since the last scan.
      2
      MIT

    • io.github.blisspixel/recon

      pueo-labs
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables agents to map a domain's public technology and identity footprint — email providers and controls, identity indicators, SaaS, and cloud infrastructure — as evidence-backed, machine-readable observations marked passive by default, where missing evidence reads as "not observed" rather than "not used". Runs locally with one-domain lookups, multi-domain comparisons, and explicit collection failures.
      5
      Apache 2.0

    • mcp-recon

      dotMuny
      A
      license
      A
      quality
      C
      maintenance
      Enables AI agents to run reconnaissance tasks such as DNS, WHOIS, certificate transparency, TLS certificate, HTTP header, and limited port checks against explicitly authorized domains and IPs. Scope permissions, deny rules, default-deny resolution pinning, rate budgets, and append-only audit logging are all enforced inside the server so an out-of-scope request cannot be expressed.
      12
      Apache 2.0

    • MCP Security Tools Suite

      Ap6pack
      -
      license
      Not graded
      quality
      Not graded
      maintenance
      Enables ethical security testing and attack surface management through SSL certificate validation, CVE queries, subdomain enumeration, security header analysis, and comprehensive reconnaissance capabilities. Designed for authorized penetration testing workflows with responsible disclosure practices.
      -

    This server cannot be deployed

    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Maintenance

    ActivityActive
    ResponsivenessWithin a week

    Resources