1. Conduid
  2. Security
  3. io.github.nan786521/recon-kit-mcp
MCP server · Security

io.github.nan786521/recon-kit-mcp

· github.com/nan786521/recon-mcp

Network & security recon tools (DNS, WHOIS, TLS, HTTP headers) for AI coding agents, each graded.

Unclaimed security
InstallView source
37Low

Scored 4 months ago · breakdown

About io.github.nan786521/recon-kit-mcp

io.github.nan786521/recon-kit-mcp is an MCP server in the Security category: network & security recon tools (DNS, WHOIS, TLS, HTTP headers) for AI coding agents, each graded.

Install

uvx
uvx recon-kit-mcp
pip
pip install recon-kit-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (13)

cookie_auditRedirect chain + cookie flags (Secure / HttpOnly / SameSite), graded

Parameters not published.

cors_checkCORS policy probe — flags arbitrary-Origin reflection and wildcard misuse

Parameters not published.

dns_reconDNS + WHOIS + email security (SPF/DMARC/DKIM), graded

Parameters not published.

http_headers_auditHTTP security headers (CSP, HSTS, X-Frame-Options, …), graded

Parameters not published.

http_methods_auditReport which HTTP methods a server allows and grade the risk (TRACE/PUT/DELETE)

Parameters not published.

ip_infoResolves the host and enriches its IP via RDAP (owner, country, CIDR, abuse)

Parameters not published.

port_scanTCP port scan of one host (≤1024 ports/call), open ports + services

Parameters not published.

recon_report**Start here.** One call → DNS, TLS, and HTTP headers checked together, with an overall grade

Parameters not published.

subdomain_enumDiscover subdomains via DNS brute-force and/or Certificate Transparency logs

Parameters not published.

subdomain_takeoverCheck subdomains for a dangling-CNAME takeover risk against known services

Parameters not published.

Show all 13 tools
tech_detectFingerprint the web stack (server, CDN/WAF, language, framework, CMS, JS) from one GET

Parameters not published.

tls_checkCertificate, protocols, ciphers, and known TLS vulnerabilities, graded

Parameters not published.

well_known_auditFetches & parses `security.txt` (RFC 9116) and `robots.txt`

Parameters not published.

Ask AI

✦

Ask AI about io.github.nan786521/recon-kit-mcp

Powered by Claude · Grounded in docs

I know everything about io.github.nan786521/recon-kit-mcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About io.github.nan786521/recon-kit-mcp

How do I install io.github.nan786521/recon-kit-mcp?

Run uvx recon-kit-mcp, then add the server to your MCP client's configuration.

Is io.github.nan786521/recon-kit-mcp safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.nan786521/recon-kit-mcp still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.