Skip to main content
Glama
nadirzhon

offsec-mcp

by nadirzhon
OverviewSchemaRelated ServersScoreDiscussions
Python
Remote

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
NVD_API_KEYNoOptional NVD API key to raise rate limits.
OFFSEC_SCOPENoInline authorization scope: comma-separated domains, wildcards, and CIDRs. Example: example.com,*.staging.example.com,10.0.0.0/24
OFFSEC_ALLOW_ANYNoSet to '1' to disable the authorization scope guard (use only for fully-owned lab).
OFFSEC_SCOPE_FILENoPath to a file containing authorization scope entries, one per line (# comments allowed).

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": true
}
logging
{}
prompts
{
  "listChanged": false
}
resources
{
  "subscribe": false,
  "listChanged": false
}
extensions
{
  "io.modelcontextprotocol/ui": {}
}
experimental
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
recon_subdomainsA

Passively enumerate sub-domains of a domain from Certificate Transparency logs.

dns_lookupA

Resolve A/AAAA/MX/NS/TXT/CNAME records for a domain (via DNS-over-HTTPS).

whoisA

Look up domain registration data (registrar, dates, nameservers) via RDAP.

cve_searchB

Search the NVD for recent CVEs by keyword, filtered by minimum CVSS score.

cve_lookupA

Fetch full details and references for a specific CVE id (e.g. CVE-2024-3094).

analyze_jsA

Extract secrets, endpoints, and parameters from JavaScript (pasted content or a URL).

http_probeA

Fetch a URL and report status, key headers, and detected technologies. [active — needs scope]

security_headersB

Audit a site's HTTP security headers and grade them A–F. [active — needs scope]

port_scanA

TCP-connect scan a host for open ports (defaults to common ports). [active — needs scope]

scope_statusA

Report whether an authorization scope is configured for active tools.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/nadirzhon/offsec-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server