github TypeScript analyzed 8b852d5

cyanheads/attack-surface-mcp-server

Name: cyanheads/attack-surface-mcp-server
Author: cyanheads

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.

maintainer: cyanheads
licence: Apache-2.0
first seen: 2026-06-13
last seen: 2026-08-31
releases · 30d: 3
short id

cyanheads/attack-surface-mcp-server is an MCP server distributed on github, maintained by cyanheads, tracked here since June 2026. It has shipped 5 releases and exposes 8 tools. Tools include attacksurface_enumerate_subdomains, attacksurface_inspect_tls, attacksurface_lookup_host, attacksurface_lookup_registration, attacksurface_map_domain, attacksurface_probe_http, and 2 more. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Its 8 tools appear to reach network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-11: 9 tools added and 11 tools removed.

full security breakdown →

tools 8