Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.
Use this profile to copy client config, check auth requirements, review tools and resources, and compare related MCP servers before adding it to an AI client.
Get practical integration notes and launch examples for MCP servers like attack-surface-mcp-server.
npx -y @cyanheads/attack-surface-mcp-server{
"SHODAN_API_KEY": "YOUR_SECRET_VALUE",
"CERTSPOTTER_API_KEY": "YOUR_SECRET_VALUE",
"ATTACKSURFACE_DEFAULT_RESOLVERS": "8.8.8.8,1.1.1.1,9.9.9.9",
"ATTACKSURFACE_HTTP_USER_AGENT": "YOUR_VALUE_HERE",
"ATTACKSURFACE_MAX_SUBDOMAINS": "200",
"ATTACKSURFACE_RDAP_BOOTSTRAP_URL": "https://rdap.org",
"ATTACKSURFACE_ALLOW_PRIVATE_TARGETS": "false",
"MCP_LOG_LEVEL": "info",
"MCP_HTTP_HOST": "127.0.0.1",
"MCP_HTTP_PORT": "3010",
"MCP_HTTP_ENDPOINT_PATH": "/mcp",
"MCP_AUTH_MODE": "none"
}Add this server entry to the mcpServers object in your Claude Desktop config, then restart the app.
{
"mcpServers": {
"io-github-cyanheads-attack-surface-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/attack-surface-mcp-server"
],
"env": {
"SHODAN_API_KEY": "YOUR_SECRET_VALUE",
"CERTSPOTTER_API_KEY": "YOUR_SECRET_VALUE",
"ATTACKSURFACE_DEFAULT_RESOLVERS": "8.8.8.8,1.1.1.1,9.9.9.9",
"ATTACKSURFACE_HTTP_USER_AGENT": "YOUR_VALUE_HERE",
"ATTACKSURFACE_MAX_SUBDOMAINS": "200",
"ATTACKSURFACE_RDAP_BOOTSTRAP_URL": "https://rdap.org",
"ATTACKSURFACE_ALLOW_PRIVATE_TARGETS": "false",
"MCP_LOG_LEVEL": "info",
"MCP_HTTP_HOST": "127.0.0.1",
"MCP_HTTP_PORT": "3010",
"MCP_HTTP_ENDPOINT_PATH": "/mcp",
"MCP_AUTH_MODE": "none"
}
}
}
}~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonNo remote HTTP endpoint is advertised. Use the package or stdio setup shown in Install.
attack-surface-mcp-server is an MCP server for Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.. It supports STDIO, HTTP transport.
Use the generated config in Install. This server runs with npx -y @cyanheads/attack-surface-mcp-server; add any required environment variables before starting your client.
Choose the Claude Desktop tab in Install and copy the config for npx -y @cyanheads/attack-surface-mcp-server. Add required environment variables before starting Claude Desktop.
Choose the Claude Code tab in Install and copy the config for npx -y @cyanheads/attack-surface-mcp-server. Add required environment variables before starting Claude Code.
Choose the Codex tab in Install and copy the config for npx -y @cyanheads/attack-surface-mcp-server. Add required environment variables before starting Codex.
Choose the Cursor or VS Code tab in Install and copy the config for npx -y @cyanheads/attack-surface-mcp-server. Add required environment variables before starting Cursor or VS Code.
attack-surface-mcp-server uses STDIO, HTTP transport. Use the package or command config in Install.
attack-surface-mcp-server inventory is listed when the MCP endpoint exposes tools, resources, or prompts. Some servers require auth first.
attack-surface-mcp-server does not advertise a verified auth requirement. If discovery fails, it may still need provider login, an API key, a bearer token, or a session header.
| Package | Registry | Version | Inputs |
|---|---|---|---|
@cyanheads/attack-surface-mcp-serverstdio | npm | 0.1.1 | Env: SHODAN_API_KEY secret Env: CERTSPOTTER_API_KEY secret Env: ATTACKSURFACE_DEFAULT_RESOLVERS Env: ATTACKSURFACE_HTTP_USER_AGENT Env: ATTACKSURFACE_MAX_SUBDOMAINS Env: ATTACKSURFACE_RDAP_BOOTSTRAP_URL Env: ATTACKSURFACE_ALLOW_PRIVATE_TARGETS Env: MCP_LOG_LEVEL |