SRC Hunter MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| sync-src-assetsB | 同步 SRC 平台的授权测试范围（爬取最新资产信息） |
| search-assetsC | 搜索可测试的资产（域名/IP/APP） |
| check-authorizationB | 检查目标是否在授权测试范围内 |
| enumerate-subdomains-liteB | 子域名枚举（使用 crt.sh API，无需外部工具） |
| web-fingerprint-liteC | Web 指纹识别（纯 Node.js 实现） |
| extract-endpoints-liteC | 提取 API 端点（无需外部工具） |
| port-scan-liteB | 简单端口扫描（TCP 连接测试） |
| enumerate-subdomainsC | 子域名枚举（使用 subfinder + amass） |
| port-scanC | 端口扫描（使用 nmap） |
| web-fingerprintC | Web 指纹识别（技术栈检测） |
| extract-endpointsC | 提取 API 端点（从 JS 文件分析） |
| directory-scanC | 敏感目录扫描 |
| vuln-scan-liteB | 轻量级漏洞扫描（内置 payload，无需外部工具） |
| verify-cveC | 验证特定 CVE 漏洞 |
| generate-reportC | 生成侦察报告 |
| export-findingsB | 导出漏洞发现（用于提交 SRC） |
| get-rate-limitsA | 获取当前的限流配置 |
| reload-configC | 重新加载配置（白名单/资产库） |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 18 tools
Several tool pairs are near-duplicates: enumerate-subdomains-lite vs enumerate-subdomains, port-scan-lite vs port-scan, web-fingerprint-lite vs web-fingerprint, extract-endpoints-lite vs extract-endpoints. The 'lite' suffix helps somewhat, but agents may struggle to choose between the lite and full versions without deeper inspection.
Tool names mostly follow a consistent verb-noun pattern (sync-, search-, check-, enumerate-, web-, extract-, port-, export-, verify-, generate-, get-, reload-). The 'lite' suffix is applied consistently, though the mix of hyphenated verbs and some noun-first names like 'web-fingerprint-lite' is a minor deviation.
18 tools is on the higher end but still reasonable for a security reconnaissance and vulnerability scanning server. The count is justified by the breadth of the domain, though the lite/full duplication inflates the number slightly.
The toolset covers the main reconnaissance workflow: asset discovery, authorization checking, subdomain enumeration, fingerprinting, endpoint extraction, port scanning, vulnerability scanning, and report generation. Missing operations like target deletion or finding management are minor gaps, but the core SRC hunting lifecycle is well covered.