- Conduid
- Marketplace
- #reconnaissance
MCP servers tagged reconnaissance
45 live MCP servers tagged "reconnaissance", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with reconnaissance.
OSINT Cheat Sheet
OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research,…
Asnmap
Map ASN/CIDR ownership & neighbors from whois/RIR exports
Cybermes
Zero-Go Model Context Protocol (MCP) Server for Cybermes Autonomous Security & Diagnostic Framework
Cti Expert
CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 repo…
Airecon
AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automa…
ARL Next
🚀 自动化资产侦察与漏洞监控平台 (ARL-Next)。重构自经典 ARL，全面升级 Puppeteer + Nuclei 引擎，打通「天眼查/ICP ➔ 资产发现 ➔ 漏洞扫描 ➔ 威胁情报追踪」安全闭环。支持 Docker 极简部署，AI 二开友好。
AI Osint
🤖 Curated AI OSINT resources — Google dorks, Shodan queries, GitHub dorks, and techniques to discover exposed LLM endpoints, leaked AI API keys, misconfigured vector databases, an…
Reap
reconnaissance for agent attack surfaces
Outrider Recon
Claude-native, governed offensive-OSINT & external attack-surface platform for authorized red-team and bug-bounty. Multi-agent recon across web, identity, cloud, secrets & breach…
SpectreWeb AI
Self-Learning AI for Manual Web Penetration Testing
Claudii Exploratores
OSINT suite for Claude — 898 curated OSINT tools as an Agent Skill + MCP server (classifier, URL builder, IBAN check, PII redactor). ALPHA.
Nextr4y
Golang tool for Next.js reconnaissance - uncover build IDs, routes, and assets with bot management evasion.
NetworksDB MCP
Fast MCP integration for NetworksDB API - Query IP addresses, organizations, ASNs, and DNS records using natural language through Model Context Protocol
GeoLens
Image geolocation toolkit — EXIF, sun-shadow, OCR, reverse-search
Recon
Map a domain's public technical footprint with provenance, confidence, and explicit uncertainty. Passive by default, machine-readable, and built to report evidence, not guesses.
Blitzstrike
⚡ Blitz Strike — a universal MCP penetration-testing toolbelt. Structured methodology: reconnaissance & attack-surface mapping, source-to-sink analysis, and live validation. 57 es…
Geolens
Image geolocation toolkit — EXIF, sun-shadow, OCR, reverse-search
Fwxray
Diff two firmware images and surface exactly what changed: new binaries, flipped config flags, added certs, and shifted entropy regions.
ScopeGraph
Local-first, authorization-gated attack-surface intelligence with live, parallel discovery, traceable assets, and read-only MCP access.
Gemini Vuln Scanner
Vulnerability Scanning and Reconnaissance App with Gemini integrated workflow
SeekMoney AI
🔍 Discover user pain points on social media with AI-driven clustering and analysis for targeted business opportunities and product ideas.
Nuclei API
Nuclei API is an advanced, AI-augmented platform for automated vulnerability scanning and template management, built around Nuclei.
Automated Pentest Suite
A dockerized Pentest-Suite capable of running AI-Powered full security checks .
Bearstrike AI
🐻 BearStrike AI: High-Signal Pentesting Console (MCP-First, Model-Agnostic). Build fast, low-noise security workflows with queue-first execution, skills-aware planning, and 150+ i…
Cryptotrace
Free-tier blockchain investigator — ETH/BTC clustering + sanctions xref
Personagraph
Identity resolution dossier — username/email/phone cross-platform
Pentest Autopilot Mcps
Professional MCP servers for penetration testing automation - SQLi, Exploit, Auth, Recon
Crt.sh Skills
Comprehensive crt.sh wrapper: Skills · MCP Server · CLI · Go SDK — search CT logs, retrieve certs, investigate CAs, lint certificates, monitor Atom feeds. Every crt.sh feature wra…
InstagramOSINT
Instagram OSINT Tool with AI-Powered Intelligence. Profile analysis, social graph mapping, engagement metrics, media downloads, bulk data export (CSV/JSON/YAML), and natural langu…
Iconhash Skills
Favicon hash calculator for cyber-space mapping — supports SKILLS, CLI, Go SDK, MCP/API integration. Calculate MMH3 hashes and identify web services via favicon fingerprints.
Vpn Recon
Route reconnaissance through VPN with 5-layer security defense. Claude Code plugin, MCP server, and Docker infrastructure.
AI Pentest Agent
基于 LLM Agent + MCP 的自动化安全侦察框架：自然语言驱动 nmap / subfinder / httpx，完成子域枚举 → Web 探测 → 端口扫描 → 中文报告闭环（仅限已授权场景，只做侦察不做利用）
Leakix MCP
MCP server for LeakIX API - security research and reconnaissance
PocketRecon AI
MCP Server for AI-powered security reconnaissance
Dnsrecon
Aggregate DNS recon (records, zone hints, takeover candidates)
Cybersecurity Tools
hand-crafted cybersecurity tools. made by me and aa certain LLM. made to be usable by humans and AI agents through an MCP server, that comes packed with the repo.
Dnsaudit
DNS posture & misconfiguration scanner — SPF/DKIM/DMARC/DNSSEC/CAA
Netrecon MCP
Network reconnaissance MCP server — DNS, WHOIS, port scanning, subdomain enumeration, TLS inspection, and more. Zero API keys required.
Certpatrol
TLS cert lifecycle & rogue-issuance watch via Certificate Transparency
Linkedin Osint CLI
LinkedIn CLI + MCP server: 43 platform commands plus a 13-command OSINT suite (company discovery, employee scraping, username generation, role classification, org charts). Interac…
Shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and C…
Shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and C…
Shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and C…
Shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and C…
Bugbounty AI
A template for running authorized bug bounty work with a local AI coding agent. Scope gate, playbooks, and a lessons log that changes the tooling.