mcp.json

{
  "name": "AynOps",
  "version": "1.1.2",
  "description": "A Model Context Protocol server that gives AI Clients real-time cybersecurity reconnaissance capabilities — WHOIS, DNS enumeration, port scanning, SSL inspection, CVE lookup, IP reputation, ASN lookup and more.",
  "author": "Gaohar Imran",
  "license": "MIT",
  "homepage": "https://github.com/AynOps/AynOps",
  "repository": {
    "type": "git",
    "url": "https://github.com/AynOps/AynOps"
  },
  "runtime": "python",
  "runtime_version": ">=3.12",
  "transport": [
    "stdio"
  ],
  "tools": [
    {
      "name": "whois_lookup",
      "description": "Query domain registration data — owner, registrar, creation date, expiry, name servers",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "dns_enumeration",
      "description": "A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, and common SRV records (SIP, LDAP, XMPP, Kerberos, Autodiscover) + common subdomain brute-forcing",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "port_scan",
      "description": "Nmap-powered port scanner with service and version detection",
      "input": {
        "target": "string",
        "scan_type": "string",
        "timeout": "integer"
      },
      "requires_api_key": false,
      "requires_system_dependency": "nmap"
    },
    {
      "name": "ssl_inspect",
      "description": "Inspect SSL/TLS certificate — issuer, expiry, cipher, SANs, TLS version",
      "input": {
        "domain": "string",
        "port": "integer"
      },
      "requires_api_key": false
    },
    {
      "name": "headers_analyzer",
      "description": "Analyze HTTP response security headers — checks HSTS, CSP, X-Frame-Options, and more with severity ratings and misconfiguration details",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "email_security_check",
      "description": "Check SPF, DKIM, and DMARC DNS records for a domain to assess email anti-spoofing configuration",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "tech_stack_detect",
      "description": "Fingerprint web server, CMS, CDN, and JS frameworks",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "cert_transparency",
      "description": "Query crt.sh Certificate Transparency logs for a domain and extract certificate, subdomain, and wildcard information",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "asn_lookup",
      "description": "Find ASN, BGP prefix, organization, registry and country for any IP or domain via Team Cymru WHOIS (no API key required)",
      "input": {
        "target": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "cve_lookup",
      "description": "Search NVD database for known CVEs by software name and version",
      "input": {
        "software": "string",
        "version": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "ip_reputation",
      "description": "Check if an IP address is flagged as malicious via AbuseIPDB",
      "input": {
        "ip_address": "string"
      },
      "requires_api_key": true,
      "api_key_env": "ABUSEIPDB_API_KEY",
      "api_key_url": "https://www.abuseipdb.com"
    },
    {
      "name": "cloud_exposure_check",
      "description": "Checks for publicly accessible AWS S3, Azure Blob Storage, and Google Cloud Storage buckets from the target domain",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "full_recon",
      "description": "Runs all core tools in parallel against a domain and returns combined results",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "trace_redirects",
      "description": "Trace the full HTTP redirect chain for a URL hop by hop, flagging TLS downgrades, private-IP leaks, redirect loops, cross-domain hops, and overly long chains",
      "input": {
        "url": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "robots_txt_inspect",
      "description": "Fetch and parse the robots.txt file for a given domain to reveal hidden directories and sitemaps",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "subdomain_takeover",
      "description": "Check discovered subdomains for takeover vulnerabilities — resolves CNAMEs, matches known-vulnerable service fingerprints (GitHub Pages, Heroku, S3, Azure, Ghost, Shopify, Fastly), and confirms via an HTTP probe",
      "input": {
        "domain": "string"
      },
      "requires_api_key": false
    },
    {
      "name": "hibp_check",
      "description": "Check if an email or domain appears in Have I Been Pwned breach data (requires HIBP_API_KEY)",
      "input": {
        "query": "string"
      },
      "requires_api_key": true,
      "api_key_env": "HIBP_API_KEY",
      "api_key_url": "https://haveibeenpwned.com/API/Key"
    }
  ],
  "environment_variables": [
    {
      "name": "ABUSEIPDB_API_KEY",
      "description": "Required for ip_reputation tool. Get free key at abuseipdb.com",
      "required": false
    },
    {
      "name": "HIBP_API_KEY",
      "description": "Required for hibp_check tool. Get a key at haveibeenpwned.com",
      "required": false
    }
  ],
  "installation": {
    "steps": [
      "git clone https://github.com/AynOps/AynOps.git",
      "cd AynOps",
      "python -m venv .venv",
      "pip install -r requirements.txt",
      "Install Nmap from nmap.org/download.html"
    ]
  },
  "claude_desktop_config": {
    "mcpServers": {
      "AynOps": {
        "command": "C:\\full\\path\\to\\AynOps\\.venv\\Scripts\\python.exe",
        "args": [
          "C:\\full\\path\\to\\AynOps\\server.py"
        ],
        "env": {
          "ABUSEIPDB_API_KEY": "your-api-key-here",
          "HIBP_API_KEY": "your-hibp-api-key-here"
        }
      }
    }
  },
  "tags": [
    "mcp",
    "cybersecurity",
    "reconnaissance",
    "whois",
    "osint",
    "pentesting",
    "network-security",
    "web-security",
    "dns",
    "subdomain",
    "nmap",
    "port-scanning",
    "ssl",
    "tls",
    "http",
    "cve",
    "vulnerability-assessment",
    "threat-intelligence",
    "cloud-security",
    "email-security",
    "ip-reputation",
    "certificate-transparency",
    "technology-detection",
    "breach-intelligence"
  ],
  "glama_url": "https://glama.ai/mcp/servers/gaoharimran29-glitch/AynOps"
}