attack-surface-mcp-server

Name: attack-surface-mcp-server
Author: cyanheads

cyanheads

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.

Setup

Choose your client, copy the config, then fill in any required environment variables.

Add to Cursor Add to VS Code

claude mcp add attack-surface --env SHODAN_API_KEY='<SHODAN_API_KEY>' --env CERTSPOTTER_API_KEY='<CERTSPOTTER_API_KEY>' -- npx -y @cyanheads/attack-surface-mcp-server

~/.codex/config.toml

[mcp_servers.attack-surface]
command = "npx"
args = ["-y", "@cyanheads/attack-surface-mcp-server"]
env = { SHODAN_API_KEY = "<SHODAN_API_KEY>", CERTSPOTTER_API_KEY = "<CERTSPOTTER_API_KEY>" }

# codex mcp add attack-surface --env SHODAN_API_KEY='<SHODAN_API_KEY>' --env CERTSPOTTER_API_KEY='<CERTSPOTTER_API_KEY>' -- npx -y @cyanheads/attack-surface-mcp-server

~/.cursor/mcp.json

{
  "mcpServers": {
    "attack-surface": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/attack-surface-mcp-server"
      ],
      "env": {
        "SHODAN_API_KEY": "<SHODAN_API_KEY>",
        "CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "attack-surface": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/attack-surface-mcp-server"
      ],
      "env": {
        "SHODAN_API_KEY": "<SHODAN_API_KEY>",
        "CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
      }
    }
  }
}

~/.gemini/settings.json

{
  "mcpServers": {
    "attack-surface": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/attack-surface-mcp-server"
      ],
      "env": {
        "SHODAN_API_KEY": "<SHODAN_API_KEY>",
        "CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
      }
    }
  }
}

claude_desktop_config.json

{
  "mcpServers": {
    "attack-surface": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/attack-surface-mcp-server"
      ],
      "env": {
        "SHODAN_API_KEY": "<SHODAN_API_KEY>",
        "CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
      }
    }
  }
}

.trae/mcp.json

{
  "mcpServers": {
    "attack-surface": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/attack-surface-mcp-server"
      ],
      "env": {
        "SHODAN_API_KEY": "<SHODAN_API_KEY>",
        "CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
      }
    }
  }
}

Environment variables

SHODAN_API_KEY
CERTSPOTTER_API_KEY

Replace the placeholders with your own credentials and keep them out of version control.

Setup

Environment variables

Related