About gaoharimran29-glitch/Cybersecurity-MCP-Server
gaoharimran29-glitch/Cybersecurity-MCP-Server is an MCP server published by gaoharimran29-glitch in the Security category: forcing, Nmap port scanning with service detection, SSL/TLS certificate inspection, technology stack fingerprinting, CVE lookup, and IP reputation checking. Runs fully locally via FastMCP.
The repository has 28 stars and 40 forks, with the last commit 16 hours ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/gaoharimran29-glitch/Cybersecurity-MCP-ServerThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (17)
asn_lookupFind ASN, BGP prefix, organization, registry and country for any IP or domain via Team Cymru WHOIS (no API key required)
Parameters not published.
cert_transparencyQuery crt.sh Certificate Transparency logs for a domain and extract certificate, subdomain, and wildcard information
Parameters not published.
cloud_exposure_checkChecks for publicly accessible AWS S3, Azure Blob Storage, and Google Cloud Storage buckets from the target domain
Parameters not published.
cve_lookupSearch NVD database for known CVEs by software name and version
Parameters not published.
dns_enumerationA, AAAA, MX, NS, TXT, CNAME, SOA, CAA, and common SRV records (SIP, LDAP, XMPP, Kerberos, Autodiscover) + common subdomain brute-forcing
Parameters not published.
email_security_checkCheck SPF, DKIM, and DMARC DNS records for a domain to assess email anti-spoofing configuration
Parameters not published.
full_reconRuns all core tools in parallel against a domain and returns combined results
Parameters not published.
headers_analyzerAnalyze HTTP response security headers — checks HSTS, CSP, X-Frame-Options, and more with severity ratings and misconfiguration details
Parameters not published.
hibp_checkCheck if an email or domain appears in Have I Been Pwned breach data (requires HIBP_API_KEY)
Parameters not published.
ip_reputationCheck if an IP address is flagged as malicious via AbuseIPDB
Parameters not published.
Show all 17 tools
port_scanNmap-powered port scanner with service and version detection
Parameters not published.
robots_txt_inspectFetch and parse the robots.txt file for a given domain to reveal hidden directories and sitemaps
Parameters not published.
ssl_inspectInspect SSL/TLS certificate — issuer, expiry, cipher, SANs, TLS version
Parameters not published.
subdomain_takeoverCheck discovered subdomains for takeover vulnerabilities — resolves CNAMEs, matches known-vulnerable service fingerprints (GitHub Pages, Heroku, S3, Azure, Ghost, Shopify, Fastly), and confirms via an HTTP probe
Parameters not published.
tech_stack_detectFingerprint web server, CMS, CDN, and JS frameworks
Parameters not published.
trace_redirectsTrace the full HTTP redirect chain for a URL hop by hop, flagging TLS downgrades, private-IP leaks, redirect loops, cross-domain hops, and overly long chains
Parameters not published.
whois_lookupQuery domain registration data — owner, registrar, creation date, expiry, name servers
Parameters not published.
Ask AI
Ask AI about gaoharimran29-glitch/Cybersecurity-MCP-Server
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.