MCP Recon

What is MCP Recon?

A comprehensive Model Context Protocol (MCP) server for web security reconnaissance and analysis. It provides cybersecurity professionals with essential reconnaissance capabilities through Python-native implementations, following standard cybersecurity reconnaissance methodology.

How to use MCP Recon?

Install via provided scripts (install.ps1 for Windows, install.sh for Linux/macOS). Requires Python 3.10+, UV Package Manager, and Nmap. Configure Claude Desktop by adding the server entry to the mcpServers object in the appropriate config file, specifying the path to uv and the project directory. Then invoke tools such as whois_info, dns_records, port_scan, etc., through Claude.

Key features of MCP Recon

• Information gathering (WHOIS, domain history)
• DNS analysis (lookup, reverse DNS, subdomain enumeration)
• Network reconnaissance (IP info, alive check, port scanning)
• Web application analysis (TLS, HTTP headers, tech detection, URL extraction)
• Passive subdomain enumeration via Certificate Transparency logs
• Active subdomain enumeration using customizable DNS brute‑force wordlist
• Advanced Nmap integration with multiple scan modes

Use cases of MCP Recon

• Perform passive reconnaissance on target domains before penetration testing
• Enumerate DNS records and discover subdomains for infrastructure mapping
• Scan open ports and identify running services on target networks
• Analyze web application security headers and detect technologies
• Inspect TLS certificates for vulnerabilities and misconfigurations