attack-surface-mcp-server — MCP Server 安装与配置

{
  "id": "io.github.cyanheads/attack-surface-mcp-server",
  "type": "mcp-server",
  "version": "0.1.1",
  "displayName": "attack-surface-mcp-server",
  "description": "Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.",
  "repository": {
    "url": "https://github.com/cyanheads/attack-surface-mcp-server",
    "source": "github"
  },
  "distribution": {
    "packages": [
      {
        "registryType": "npm",
        "identifier": "@cyanheads/attack-surface-mcp-server",
        "version": "0.1.1",
        "runtimeHint": "bun",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "SHODAN_API_KEY",
            "description": "Optional Shodan API key. Enables attacksurface_lookup_host; absent → that one tool returns source_unavailable and the rest of the server works.",
            "isSecret": true
          },
          {
            "name": "CERTSPOTTER_API_KEY",
            "description": "Optional Certspotter API key. Raises CT-fallback rate limits; absent → free unauthenticated tier.",
            "isSecret": true
          },
          {
            "name": "ATTACKSURFACE_DEFAULT_RESOLVERS",
            "description": "Comma-separated default DNS resolver IPs for attacksurface_resolve_dns."
          },
          {
            "name": "ATTACKSURFACE_HTTP_USER_AGENT",
            "description": "Default User-Agent for attacksurface_probe_http (overridable per call)."
          },
          {
            "name": "ATTACKSURFACE_MAX_SUBDOMAINS",
            "description": "Cap on subdomains resolved during a map_domain run."
          },
          {
            "name": "ATTACKSURFACE_RDAP_BOOTSTRAP_URL",
            "description": "RDAP bootstrap base URL; override for a private/mirrored RDAP."
          },
          {
            "name": "ATTACKSURFACE_ALLOW_PRIVATE_TARGETS",
            "description": "Set true to disable the SSRF guard for internal-network assessment (local/trusted deployments only)."
          },
          {
            "name": "MCP_LOG_LEVEL",
            "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
          }
        ]
      },
      {
        "registryType": "npm",
        "identifier": "@cyanheads/attack-surface-mcp-server",
        "version": "0.1.1",
        "runtimeHint": "bun",
        "transport": "streamable-http",
        "environmentVariables": [
          {
            "name": "MCP_HTTP_HOST",
            "description": "The hostname for the HTTP server."
          },
          {
            "name": "MCP_HTTP_PORT",
            "description": "The port to run the HTTP server on."
          },
          {
            "name": "MCP_HTTP_ENDPOINT_PATH",
            "description": "The endpoint path for the MCP server."
          },
          {
            "name": "MCP_AUTH_MODE",
            "description": "Authentication mode to use: 'none', 'jwt', or 'oauth'."
          },
          {
            "name": "MCP_LOG_LEVEL",
            "description": "Sets the minimum log level for output (e.g., 'debug', 'info', 'warn')."
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.cyanheads/attack-surface-mcp-server",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.cyanheads%2Fattack-surface-mcp-server/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}