--- bezeichner: "io.github.cyanheads/attack-surface-mcp-server" art: "mcp_server" slug: "io-github-cyanheads-attack-surface-mcp-server" paketkoordinate: "npm:@cyanheads/attack-surface-mcp-server" status: "aktiv" homepage: "https://github.com/cyanheads/attack-surface-mcp-server" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "io.github.cyanheads" registerseite: "https://tracevero.de/mcp/io-github-cyanheads-attack-surface-mcp-server" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan." version: "0.2.3" roh_umgebungsvariablen: "SHODAN_API_KEY, CERTSPOTTER_API_KEY, ATTACKSURFACE_DEFAULT_RESOLVERS, ATTACKSURFACE_HTTP_USER_AGENT, ATTACKSURFACE_MAX_SUBDOMAINS, ATTACKSURFACE_RDAP_BOOTSTRAP_URL, ATTACKSURFACE_ALLOW_PRIVATE_TARGETS, MCP_LOG_LEVEL, MCP_HTTP_HOST, MCP_HTTP_PORT, MCP_HTTP_ENDPOINT_PATH, MCP_AUTH_MODE, MCP_LOG_LEVEL" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio, streamable-http" roh_pfadargumente: "" roh_repository_url: "https://github.com/cyanheads/attack-surface-mcp-server" roh_paketquellen: "npm, npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-09-30" roh_aktualisiert_am: "2026-09-30" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "@cyanheads/attack-surface-mcp-server" roh_paketversionen: "0.2.3" roh_laufzeithinweise: "bun" roh_umgebungsformate: "string" roh_umgebungsbeschreibungen: "ATTACKSURFACE_ALLOW_PRIVATE_TARGETS=Set true to disable the SSRF guard for internal-network assessment (local/trusted deployments only). · ATTACKSURFACE_DEFAULT_RESOLVERS=Comma-separated default DNS resolver IPs for attacksurface_resolve_dns. · ATTACKSURFACE_HTTP_USER_AGENT=Default User-Agent for attacksurface_probe_http (overridable per call). · ATTACKSURFACE_MAX_SUBDOMAINS=Cap on subdomains resolved during a map_domain run. · ATTACKSURFACE_RDAP_BOOTSTRAP_URL=RDAP bootstrap base URL; override for a private/mirrored RDAP. · CERTSPOTTER_API_KEY=Optional Certspotter API key. Raises CT-fallback rate limits; absent → free unauthenticated tier. · MCP_AUTH_MODE=Authentication mode to use: 'none', 'jwt', or 'oauth'. · MCP_HTTP_ENDPOINT_PATH=The endpoint path for the MCP server. · MCP_HTTP_HOST=The hostname for the HTTP server. · MCP_HTTP_PORT=The port to run the HTTP server on. · MCP_LOG_LEVEL=Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). · SHODAN_API_KEY=Optional Shodan API key. Enables attacksurface_lookup_host; absent → that one tool returns source_unavailable and the rest of the server works." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@cyanheads/attack-surface-mcp-server\",\"version\":\"0.2.3\",\"runtimeHint\":\"bun\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"SHODAN_API_KEY\",\"description\":\"Optional Shodan API key. Enables attacksurface_lookup_host; absent → that one tool returns source_unavailable and the rest of the server works.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"CERTSPOTTER_API_KEY\",\"description\":\"Optional Certspotter API key. Raises CT-fallback rate limits; absent → free unauthenticated tier.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"ATTACKSURFACE_DEFAULT_RESOLVERS\",\"description\":\"Comma-separated default DNS resolver IPs for attacksurface_resolve_dns.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"ATTACKSURFACE_HTTP_USER_AGENT\",\"description\":\"Default User-Agent for attacksurface_probe_http (overridable per call).\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"ATTACKSURFACE_MAX_SUBDOMAINS\",\"description\":\"Cap on subdomains resolved during a map_domain run.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"ATTACKSURFACE_RDAP_BOOTSTRAP_URL\",\"description\":\"RDAP bootstrap base URL; override for a private/mirrored RDAP.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"ATTACKSURFACE_ALLOW_PRIVATE_TARGETS\",\"description\":\"Set true to disable the SSRF guard for internal-network assessment (local/trusted deployments only).\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_LOG_LEVEL\",\"description\":\"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":true},{\"registryType\":\"npm\",\"identifier\":\"@cyanheads/attack-surface-mcp-server\",\"version\":\"0.2.3\",\"runtimeHint\":\"bun\",\"transport\":\"streamable-http\",\"environment\":[{\"name\":\"MCP_HTTP_HOST\",\"description\":\"The hostname for the HTTP server.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_HTTP_PORT\",\"description\":\"The port to run the HTTP server on.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_HTTP_ENDPOINT_PATH\",\"description\":\"The endpoint path for the MCP server.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_AUTH_MODE\",\"description\":\"Authentication mode to use: 'none', 'jwt', or 'oauth'.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_LOG_LEVEL\",\"description\":\"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":true}],\"remotes\":[]}" --- # io.github.cyanheads/attack-surface-mcp-server ## Gemessene Werte | Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe | | --- | --- | --- | --- | --- | --- | | Pflicht-Geheimnisse deklariert | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Ausführungsort | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio, streamable-http | | Pfadargument vorhanden | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository-Adresse geführt | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/cyanheads/attack-surface-mcp-server | | Beschreibung (Rohangabe) | Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Deklarierte Version | 0.2.3 | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | | Umgebungsvariablen (Rohangabe) | SHODAN_API_KEY, CERTSPOTTER_API_KEY, ATTACKSURFACE_DEFAULT_RESOLVERS, ATTACKSURFACE_HTTP_USER_AGENT, ATTACKSURFACE_MAX_SUBDOMAINS, ATTACKSURFACE_RDAP_BOOTSTRAP_URL, ATTACKSURFACE_ALLOW_PRIVATE_TARGETS, MCP_LOG_LEVEL, MCP_HTTP_HOST, MCP_HTTP_PORT, MCP_HTTP_ENDPOINT_PATH, MCP_AUTH_MODE, MCP_LOG_LEVEL | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Geheime Pflichtvariablen (Rohangabe) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transportarten (Rohangabe) | stdio, streamable-http | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Pfadargumente (Rohangabe) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (Rohangabe) | https://github.com/cyanheads/attack-surface-mcp-server | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Paketquellen (Rohangabe) | npm, npm | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Geheime Pflichtkopfzeilen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Pfad-Umgebungsvariablen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote-Adressen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote-Hosts (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Statusmeldung des Registers (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Im Register eingetragen am (Rohangabe) | 2026-09-30 | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | | Im Register geändert am (Rohangabe) | 2026-09-30 | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | | Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository-Unterordner (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Paketbezeichner (Rohangabe) | @cyanheads/attack-surface-mcp-server | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Paketversionen (Rohangabe) | 0.2.3 | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | | Laufzeithinweise (Rohangabe) | bun | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Formate der Umgebungsvariablen (Rohangabe) | string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Beschreibungen der Umgebungsvariablen (Rohangabe) | ATTACKSURFACE_ALLOW_PRIVATE_TARGETS=Set true to disable the SSRF guard for internal-network assessment (local/trusted deployments only). · ATTACKSURFACE_DEFAULT_RESOLVERS=Comma-separated default DNS resolver IPs for attacksurface_resolve_dns. · ATTACKSURFACE_HTTP_USER_AGENT=Default User-Agent for attacksurface_probe_http (overridable per call). · ATTACKSURFACE_MAX_SUBDOMAINS=Cap on subdomains resolved during a map_domain run. · ATTACKSURFACE_RDAP_BOOTSTRAP_URL=RDAP bootstrap base URL; override for a private/mirrored RDAP. · CERTSPOTTER_API_KEY=Optional Certspotter API key. Raises CT-fallback rate limits; absent → free unauthenticated tier. · MCP_AUTH_MODE=Authentication mode to use: 'none', 'jwt', or 'oauth'. · MCP_HTTP_ENDPOINT_PATH=The endpoint path for the MCP server. · MCP_HTTP_HOST=The hostname for the HTTP server. · MCP_HTTP_PORT=The port to run the HTTP server on. · MCP_LOG_LEVEL=Sets the minimum log level for output (e.g., 'debug', 'info', 'warn'). · SHODAN_API_KEY=Optional Shodan API key. Enables attacksurface_lookup_host; absent → that one tool returns source_unavailable and the rest of the server works. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Symbolformate (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"npm","identifier":"@cyanheads/attack-surface-mcp-server","version":"0.2.3","runtimeHint":"bun","transport":"stdio","environment":[{"name":"SHODAN_API_KEY","description":"Optional Shodan API key. Enables attacksurface_lookup_host; absent → that one tool returns source_unavailable and the rest of the server works.","format":"string","required":false,"secret":true},{"name":"CERTSPOTTER_API_KEY","description":"Optional Certspotter API key. Raises CT-fallback rate limits; absent → free unauthenticated tier.","format":"string","required":false,"secret":true},{"name":"ATTACKSURFACE_DEFAULT_RESOLVERS","description":"Comma-separated default DNS resolver IPs for attacksurface_resolve_dns.","format":"string","required":false,"secret":false},{"name":"ATTACKSURFACE_HTTP_USER_AGENT","description":"Default User-Agent for attacksurface_probe_http (overridable per call).","format":"string","required":false,"secret":false},{"name":"ATTACKSURFACE_MAX_SUBDOMAINS","description":"Cap on subdomains resolved during a map_domain run.","format":"string","required":false,"secret":false},{"name":"ATTACKSURFACE_RDAP_BOOTSTRAP_URL","description":"RDAP bootstrap base URL; override for a private/mirrored RDAP.","format":"string","required":false,"secret":false},{"name":"ATTACKSURFACE_ALLOW_PRIVATE_TARGETS","description":"Set true to disable the SSRF guard for internal-network assessment (local/trusted deployments only).","format":"string","required":false,"secret":false},{"name":"MCP_LOG_LEVEL","description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","required":false,"secret":false}],"additional_arguments_declared":true},{"registryType":"npm","identifier":"@cyanheads/attack-surface-mcp-server","version":"0.2.3","runtimeHint":"bun","transport":"streamable-http","environment":[{"name":"MCP_HTTP_HOST","description":"The hostname for the HTTP server.","format":"string","required":false,"secret":false},{"name":"MCP_HTTP_PORT","description":"The port to run the HTTP server on.","format":"string","required":false,"secret":false},{"name":"MCP_HTTP_ENDPOINT_PATH","description":"The endpoint path for the MCP server.","format":"string","required":false,"secret":false},{"name":"MCP_AUTH_MODE","description":"Authentication mode to use: 'none', 'jwt', or 'oauth'.","format":"string","required":false,"secret":false},{"name":"MCP_LOG_LEVEL","description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} | MCP-Register | 2026-10-01T01:17:01.643Z | selbstauskunft | | ## Verweise - Namensraum: [[namensraum/io-github-cyanheads|io.github.cyanheads]] --- - Registerseite: - Abgerufen am: 2026-10-10