MCP server

Attack Surface

io.github.cyanheads/attack-surface-mcp-server

Checked 26 Oct 2026, 08:31 UTC · Still published on its registry; checked against OSV.dev; never run by us

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

Runs on your computer

Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add attack-surface-mcp-server -- npx -y @cyanheads/attack-surface-mcp-server@0.4.0

Claude Desktop

{"mcpServers":{"attack-surface-mcp-server":{"command":"npx","args":["-y","@cyanheads/attack-surface-mcp-server@0.4.0"]}}}

Codex (config.toml)

[mcp_servers.attack-surface-mcp-server]
command = "npx"
args = ["-y","@cyanheads/attack-surface-mcp-server@0.4.0"]

Gemini CLI

{"mcpServers":{"attack-surface-mcp-server":{"command":"npx","args":["-y","@cyanheads/attack-surface-mcp-server@0.4.0"]}}}

Cursor

{"mcpServers":{"attack-surface-mcp-server":{"command":"npx","args":["-y","@cyanheads/attack-surface-mcp-server@0.4.0"]}}}

VS Code

{"servers":{"attack-surface-mcp-server":{"type":"stdio","command":"npx","args":["-y","@cyanheads/attack-surface-mcp-server@0.4.0"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

Related MCP servers

Subdomain API
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Hackertarget
HackerTarget MCP.
Crypto, web, finance and app data tools
179 tools: crypto, EVM, SEC, FDA, NHTSA VIN, NWS weather, Eurostat, FRED, cloud & LLM prices, DNS.
Domainposture
Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).
mcp-toolbelt
29 pay-per-call DNS, SEO, SSL, security, WHOIS, mail, and AI tools for AI agents. x402, no API key.
Domain & Company Intel MCP
Domain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.
Gapup
271 agent-payable tools: competitive intel, finance, KYC, compliance, ESG. x402 per-call.
Dechonet
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.cyanheads/attack-surface-mcp-server.svg)](https://aptlynx.net/servers/io.github.cyanheads/attack-surface-mcp-server)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents