Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan via MCP. STDIO or Streamable HTTP.
Latest release v0.4.0 — v0.4.0: Bounded discovery and actionable review guidance · 16 Oct 2026
2 files for Codex, OpenCode and Claude Code: attack-surface-mcp-server AGENTS.md, attack-surface-mcp-server CLAUDE.md — 16,676 tokens loaded in every session.
AGENTS.md A 8,338 tok CLAUDE.md A 8,338 tok These files are cyanheads/attack-surface-mcp-server's own configuration — they tell Codex, OpenCode and Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.