External Reconnaissance MCP Server

Name: External Reconnaissance MCP Server
Author: naebo

@naebo

代码仓库

关于 External Reconnaissance MCP Server

An external reconnaissnce MCP server for offensive security engagements

基本信息

分类

其他

运行时

python

传输方式

stdio

发布者

naebo

配置

暂无标准配置

该服务器的 README 中没有可解析的 MCP 配置块，请前往代码仓库查看安装说明。

代码仓库

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is External Reconnaissance MCP Server?

The External Reconnaissance MCP Server is a Model Context Protocol (MCP) server for performing active external reconnaissance activities against a domain. It provides DNS enumeration, subdomain discovery, email security analysis, and SSL certificate inspection, and is intended as a demonstration and for educational/authorized testing purposes.

How to use External Reconnaissance MCP Server?

Download the repository, ensure uv is installed, and configure Claude for Desktop by editing the configuration file (claude_desktop_config.json) to point to the external-recon.py script with the correct absolute paths. After relaunching Claude, select the external-recon setup prompt, supply the target domain, and then ask Claude to perform external reconnaissance.

Key features of External Reconnaissance MCP Server

DNS record enumeration (A, AAAA, MX, NS, etc.)
DNS zone transfer attempts
Subdomain enumeration and bruteforcing
WHOIS lookups and HTTP headers analysis
Email security assessment

Use cases of External Reconnaissance MCP Server

Enumerating DNS records for a target domain
Discovering hidden subdomains via bruteforcing
Analyzing email security configurations (SPF, DKIM, DMARC)
Gathering SSL certificate information for a domain
Performing WHOIS lookups for domain ownership data

FAQ from External Reconnaissance MCP Server

Is this production-ready?

No, this is a proof-of-concept demonstration and is not production-ready. Use at your own risk.

What system dependencies are required?

The tools dig, whois, and dnsrecon must be installed on the system.

What wordlist does the server use?

A supplied dns-wordlist.txt is used for subdomain bruteforcing. You can modify or replace it, though there is a limitation with very long wordlists.

What are the security considerations?

Only use against authorized targets, follow responsible disclosure practices, and respect the target system’s resources.

How do I configure the server for Claude for Desktop?

Download the repo, install uv, and add the configuration to claude_desktop_config.json with the absolute path to uv and the project directory. The server key is external-recon.