Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.
接入配置
选择客户端，复制配置，再按项目文档补齐环境变量。
claude mcp add attack-surface --env SHODAN_API_KEY='<SHODAN_API_KEY>' --env CERTSPOTTER_API_KEY='<CERTSPOTTER_API_KEY>' -- npx -y @cyanheads/attack-surface-mcp-server~/.codex/config.toml
[mcp_servers.attack-surface]
command = "npx"
args = ["-y", "@cyanheads/attack-surface-mcp-server"]
env = { SHODAN_API_KEY = "<SHODAN_API_KEY>", CERTSPOTTER_API_KEY = "<CERTSPOTTER_API_KEY>" }
# codex mcp add attack-surface --env SHODAN_API_KEY='<SHODAN_API_KEY>' --env CERTSPOTTER_API_KEY='<CERTSPOTTER_API_KEY>' -- npx -y @cyanheads/attack-surface-mcp-server~/.cursor/mcp.json
{
"mcpServers": {
"attack-surface": {
"command": "npx",
"args": [
"-y",
"@cyanheads/attack-surface-mcp-server"
],
"env": {
"SHODAN_API_KEY": "<SHODAN_API_KEY>",
"CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"attack-surface": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@cyanheads/attack-surface-mcp-server"
],
"env": {
"SHODAN_API_KEY": "<SHODAN_API_KEY>",
"CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"attack-surface": {
"command": "npx",
"args": [
"-y",
"@cyanheads/attack-surface-mcp-server"
],
"env": {
"SHODAN_API_KEY": "<SHODAN_API_KEY>",
"CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"attack-surface": {
"command": "npx",
"args": [
"-y",
"@cyanheads/attack-surface-mcp-server"
],
"env": {
"SHODAN_API_KEY": "<SHODAN_API_KEY>",
"CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"attack-surface": {
"command": "npx",
"args": [
"-y",
"@cyanheads/attack-surface-mcp-server"
],
"env": {
"SHODAN_API_KEY": "<SHODAN_API_KEY>",
"CERTSPOTTER_API_KEY": "<CERTSPOTTER_API_KEY>"
}
}
}
}需要的环境变量
SHODAN_API_KEYCERTSPOTTER_API_KEY
把占位值换成你自己的密钥；不要把密钥提交到代码仓库。