MCP Observatory
2m ago Tracked 56,302 Last 2m ago 24h 2,477
github TypeScript analyzed 8b852d5

cyanheads/attack-surface-mcp-server

github

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.

maintainer
cyanheads
licence
Apache-2.0
first seen
2026-06-13
last seen
2026-08-31
releases · 30d
3
short id

Drift inferred · capture-to-capture

tool count over time

06-13 18:40 now
10t
10t
capabilities 8 tools
transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 8 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • attacksurface_enumerate_subdomains
  • attacksurface_inspect_tls
  • attacksurface_lookup_host
  • attacksurface_lookup_registration
  • attacksurface_map_domain
  • attacksurface_probe_http
  • attacksurface_recon_guidance
  • attacksurface_resolve_dns
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 8b852d5 · analyzer v33 · 9h ago

skills & prompt files 34

danger signals2

code evidence vv0.2.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 71

filesystem 15

  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/build-changelog.ts :32 import { existsSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/build.ts :17 import { readFileSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/check-dependency-specifiers.ts :38 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/check-docs-sync.ts :22 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/check-framework-antipatterns.ts :39 import { existsSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/check-skill-versions.ts :33 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/check-skills-sync.ts :37 import { existsSync, readdirSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/clean-mcpb.ts :29 import { existsSync, statSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/clean.ts :15 import { readdir, rm } from 'node:fs/promises';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/devcheck.ts :3 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/lint-mcp.ts :19 import { existsSync, readdirSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/lint-packaging.ts :52 import { existsSync, readdirSync, readFileSync } from 'node:fs';
show 3 more
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/list-skills.ts :21 import { existsSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/release-github.ts :33 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/tree.ts :24 import type { Dirent } from 'node:fs';

shell / exec 7

  • shell (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/build.ts :16 import { execFile } from 'node:child_process';
  • shell (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/check-framework-antipatterns.ts :38 import { spawnSync } from 'node:child_process';
  • shell (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/check-skill-versions.ts :32 import { spawnSync } from 'node:child_process';
  • shell (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/clean-mcpb.ts :28 import { execFileSync } from 'node:child_process';
  • shell (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/devcheck.ts :2 import { type ChildProcess, spawn, spawnSync } from 'node:child_process';
  • shell (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/lint-packaging.ts :51 import { execFileSync } from 'node:child_process';
  • shell (weak) cyanheads-attack-surface-mcp-server-8b852d5/scripts/release-github.ts :32 import { spawnSync } from 'node:child_process';

network 3

  • net cyanheads-attack-surface-mcp-server-8b852d5/src/services/http/http-service.ts :128 response = await fetch(currentUrl, {
  • net cyanheads-attack-surface-mcp-server-8b852d5/src/services/registration/registration-service.ts :12 import * as net from 'node:net';
  • net cyanheads-attack-surface-mcp-server-8b852d5/src/utils/validation.ts :8 import { isIP } from 'node:net';

tool registrations 8

  • attacksurface_enumerate_subdomains cyanheads-attack-surface-mcp-server-8b852d5/src/mcp-server/tools/definitions/enumerate-subdomains.tool.ts :61
  • attacksurface_inspect_tls cyanheads-attack-surface-mcp-server-8b852d5/src/mcp-server/tools/definitions/inspect-tls.tool.ts :62
  • attacksurface_lookup_host cyanheads-attack-surface-mcp-server-8b852d5/src/mcp-server/tools/definitions/lookup-host.tool.ts :63
  • attacksurface_lookup_registration cyanheads-attack-surface-mcp-server-8b852d5/src/mcp-server/tools/definitions/lookup-registration.tool.ts :55
  • attacksurface_map_domain cyanheads-attack-surface-mcp-server-8b852d5/src/mcp-server/tools/definitions/map-domain.tool.ts :87
  • attacksurface_probe_http cyanheads-attack-surface-mcp-server-8b852d5/src/mcp-server/tools/definitions/probe-http.tool.ts :62
  • attacksurface_recon_guidance cyanheads-attack-surface-mcp-server-8b852d5/src/mcp-server/tools/definitions/recon-guidance.tool.ts :56
  • attacksurface_resolve_dns cyanheads-attack-surface-mcp-server-8b852d5/src/mcp-server/tools/definitions/resolve-dns.tool.ts :61

declared dependencies 13

  • @cyanheads/mcp-ts-core@^0.12.3
  • pino-pretty@^13.1.3
  • zod@^4.4.3
  • @biomejs/biome@2.5.11
  • @socketsecurity/bun-security-scanner@^1.1.2
  • @types/node@^26.4.0
  • @vitest/coverage-istanbul@4.1.11
  • depcheck@^1.4.7
  • fast-check@^4.9.0
  • ignore@^7.0.6
  • tsc-alias@^1.9.2
  • typescript@^7.0.2
show 1 more
  • vitest@^4.1.11