# ExternalAttacker-MCP

A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.

- **Kind:** MCP server
- **Owner:** MorDavid
- **Source:** https://github.com/MorDavid/ExternalAttacker-MCP
- **Runtime:** python
- **License:** MIT
- **Transports:** stdio
- **Pinned commit:** `62df49ef500ec113bd7ee47e98caafb70dc7fae7`
- **Page:** https://forefy.com/mcps/8b35f7ae-bf54-56df-a9c9-c49217349eb0
- **API (JSON):** https://forefy.com/api/asr/mcps/8b35f7ae-bf54-56df-a9c9-c49217349eb0

## Install

Ask your agent: `Install the ExternalAttacker-MCP MCP server securely from: https://forefy.com/mcps/8b35f7ae-bf54-56df-a9c9-c49217349eb0 and register it with my agent, prompting me for FLASK_SECRET_KEY, API_KEY`

## Tools (8)

- `scan_subdomains`: Scan target domain(s) for subdomains using subfinder binary Args: target: Domain or file containing domains to scan domain_file: Whether target is a file conta…
- `scan_ports`: Scan a target domain for open ports using naabu binary Args: target: Domain or IP to scan file: Whether to scan a file containing domains ports: Port range to…
- `analyze_http_services`: Scan a target domain for HTTP/HTTPS services using httpx binary Args: target: Domain or file containing domains to scan file: Whether target is a file containi…
- `detect_cdn`: Check if a target domain is using a CDN using cdncheck binary Args: target: Domain to check for CDN usage resolver: DNS resolver to use
- `analyze_tls_config`: Scan a target domain for TLS/SSL configuration using tlsx binary Args: target: Domain or file containing domains to scan file: Whether target is a file contain…
- `enumerate_assets`: Unified asset enumeration using gobuster binary Args: mode: Gobuster mode (dir/dns/vhost/fuzz/gcs/s3/tftp) target: Target URL/domain/server (required for dir/d…
- `fuzz_endpoints`: Fuzz a target domain for hidden endpoints using ffuf binary Args: target: Target domain to fuzz threads: Number of concurrent threads to use wordlist: Path to…
- `resolve_dns`: Run DNS enumeration using dnsx binary Args: target: Domain or file containing domains to scan file: Whether target is a file containing domains threads: Number…

## Environment

- `FLASK_SECRET_KEY` (secret)
- `API_KEY` (secret)
- `FLASK_ENV`