External Reconnaissance MCP Server

Name: External Reconnaissance MCP Server
Author: naebo

@naebo

Repository

About External Reconnaissance MCP Server

An external reconnaissnce MCP server for offensive security engagements

Basic information

Config

No standard config provided

This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.

Repository

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is External Reconnaissance MCP Server?

The External Reconnaissance MCP Server is a Model Context Protocol (MCP) server for performing active external reconnaissance activities against a domain. It provides DNS enumeration, subdomain discovery, email security analysis, and SSL certificate inspection, and is intended as a demonstration and for educational/authorized testing purposes.

How to use External Reconnaissance MCP Server?

Download the repository, ensure uv is installed, and configure Claude for Desktop by editing the configuration file (claude_desktop_config.json) to point to the external-recon.py script with the correct absolute paths. After relaunching Claude, select the external-recon setup prompt, supply the target domain, and then ask Claude to perform external reconnaissance.

Key features of External Reconnaissance MCP Server

DNS record enumeration (A, AAAA, MX, NS, etc.)
DNS zone transfer attempts
Subdomain enumeration and bruteforcing
WHOIS lookups and HTTP headers analysis
Email security assessment

Use cases of External Reconnaissance MCP Server

Enumerating DNS records for a target domain
Discovering hidden subdomains via bruteforcing
Analyzing email security configurations (SPF, DKIM, DMARC)
Gathering SSL certificate information for a domain
Performing WHOIS lookups for domain ownership data

FAQ from External Reconnaissance MCP Server

Is this production-ready?

No, this is a proof-of-concept demonstration and is not production-ready. Use at your own risk.

What system dependencies are required?

The tools dig, whois, and dnsrecon must be installed on the system.

What wordlist does the server use?

A supplied dns-wordlist.txt is used for subdomain bruteforcing. You can modify or replace it, though there is a limitation with very long wordlists.

What are the security considerations?

Only use against authorized targets, follow responsible disclosure practices, and respect the target system’s resources.

How do I configure the server for Claude for Desktop?

Download the repo, install uv, and add the configuration to claude_desktop_config.json with the absolute path to uv and the project directory. The server key is external-recon.