AynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients
AynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients
AI Clients by default has zero native cybersecurity tooling. No WHOIS. No DNS enumeration. No port scanning. No SSL inspection.
The server publishes 6 tools. What each one is for:
headers_analyzer — Analyzes HTTP security headers — checks HSTS, CSP, X-Frame-Options, and more with severity ratings and misconfiguration detailscve_lookup — Search NVD for known CVEs by software name and version (no API key required)cloud_exposure_check — Checks for publicly accessible AWS S3, Azure Blob Storage, and Google Cloud Storage buckets using common bucket naming patterns derived from thetrace_redirects — Traces the full HTTP redirect chain hop by hop — flags TLS downgrades, private-IP leaks, redirect loops, cross-domain hops, and overly long chainsrobots_txt_inspect — Fetch and parse robots.txt to reveal hidden directories and sitemapshibp_check — Check if an email or domain appears in Have I Been Pwned breaches (HIBP_API_KEY required)headers_analyzer — Analyzes HTTP security headers — checks HSTS, CSP, X-Frame-Options, and more with severity ratings and misconfiguration detailscve_lookup — Search NVD for known CVEs by software name and version (no API key required)cloud_exposure_check — Checks for publicly accessible AWS S3, Azure Blob Storage, and Google Cloud Storage buckets using common bucket naming patterns derived from the target domaintrace_redirects — Traces the full HTTP redirect chain hop by hop — flags TLS downgrades, private-IP leaks, redirect loops, cross-domain hops, and overly long chainsrobots_txt_inspect — Fetch and parse robots.txt to reveal hidden directories and sitemapshibp_check — Check if an email or domain appears in Have I Been Pwned breaches (HIBP_API_KEY required)Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| headers_analyzer | Analyzes HTTP security headers — checks HSTS, CSP, X-Frame-Options, and more with severity ratings and misconfiguration details |
| cve_lookup | Search NVD for known CVEs by software name and version (no API key required) |
| cloud_exposure_check | Checks for publicly accessible AWS S3, Azure Blob Storage, and Google Cloud Storage buckets using common bucket naming patterns derived from the target domain |
| trace_redirects | Traces the full HTTP redirect chain hop by hop — flags TLS downgrades, private-IP leaks, redirect loops, cross-domain hops, and overly long chains |
| robots_txt_inspect | Fetch and parse robots.txt to reveal hidden directories and sitemaps |
| hibp_check | Check if an email or domain appears in Have I Been Pwned breaches (HIBP_API_KEY required) |
| Variable | Description | Required |
|---|---|---|
| ABUSEIPDB_API_KEY | Credential the server authenticates with. | Yes |
| HIBP_API_KEY | Credential the server authenticates with. | Yes |
Enables natural language interaction with Home Assistant entities using the Model Context Protocol.
Integrates with Home Assistant to provide smart home control capabilities via Model Context Protocol (MCP).
A Model Context Protocol (MCP) server that enables AI agents to interact with the 1NCE IoT connectivity management platform through natural language.
Check AI crawler robots.txt policy and monitor public-site policy, sitemap, and llms.txt changes.
FX and metals market data: plans, 51 symbols, price quotes, and candles with an API key.
Bounded crawl-readiness check for agent access: robots.txt, sitemap.xml, llms.txt, homepage.