MCP Recon

What is MCP Recon?

A comprehensive Model Context Protocol (MCP) server for web security reconnaissance and analysis. It provides cybersecurity professionals with essential reconnaissance capabilities through Python-native implementations, following standard cybersecurity reconnaissance methodology.

How to use MCP Recon?

Install via provided scripts (install.ps1 for Windows, install.sh for Linux/macOS). Requires Python 3.10+, UV Package Manager, and Nmap. Configure Claude Desktop by adding the server entry to the mcpServers object in the appropriate config file, specifying the path to uv and the project directory. Then invoke tools such as whois_info, dns_records, port_scan, etc., through Claude.

Key features of MCP Recon

• Information gathering (WHOIS, domain history)
• DNS analysis (lookup, reverse DNS, subdomain enumeration)
• Network reconnaissance (IP info, alive check, port scanning)
• Web application analysis (TLS, HTTP headers, tech detection, URL extraction)
• Passive subdomain enumeration via Certificate Transparency logs
• Active subdomain enumeration using customizable DNS brute‑force wordlist
• Advanced Nmap integration with multiple scan modes

Use cases of MCP Recon

• Perform passive reconnaissance on target domains before penetration testing
• Enumerate DNS records and discover subdomains for infrastructure mapping
• Scan open ports and identify running services on target networks
• Analyze web application security headers and detect technologies
• Inspect TLS certificates for vulnerabilities and misconfigurations

FAQ from MCP Recon

What are the prerequisites for MCP Recon?

Python 3.10+, UV Package Manager, and Nmap. Installation scripts handle dependency setup automatically.

How do I configure MCP Recon with Claude Desktop?

Add the server entry to the mcpServers object in the Claude Desktop config file (claude_desktop_config.json) with the command pointing to the uv binary and arguments specifying the project directory and main.py. Examples for Windows, Linux, and macOS are provided.

Can I customize the subdomain wordlist used by MCP Recon?

Yes. Edit the subdomains.txt file in the project root, or provide a custom wordlist directly in Claude Desktop chat.

What port scanning modes are available in MCP Recon?

Common services, top 100 ports, top 1000 ports, specific ports (e.g., "80,443,8080"), or a port range (e.g., "1-1000").

Is there a legal disclaimer for using MCP Recon?

Yes. The tool is intended for legitimate security research, penetration testing, and bug bounty activities only. Users must have proper authorization before scanning any networks, systems, or applications. The authors are not responsible for misuse.