AynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients
Most cloud and infrastructure work still happens through a UI a human drives. AynOps MCP server moves it into the conversation instead. AynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients.
AI Clients by default has zero native cybersecurity tooling. No WHOIS. No DNS enumeration. No port scanning. No SSL inspection.
Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client. The configuration blocks on this page cover the common clients.
The server publishes 6 tools. What each one is for:
headers_analyzer — Analyzes HTTP security headers — checks HSTS, CSP, X-Frame-Options, and more with severity ratings and misconfiguration detailscve_lookup — Search NVD for known CVEs by software name and version (no API key required)cloud_exposure_check — Checks for publicly accessible AWS S3, Azure Blob Storage, and Google Cloud Storage buckets using common bucket naming patterns derived from thetrace_redirects — Traces the full HTTP redirect chain hop by hop — flags TLS downgrades, private-IP leaks, redirect loops, cross-domain hops, and overly long chainsrobots_txt_inspect — Fetch and parse robots.txt to reveal hidden directories and sitemapshibp_check — Check if an email or domain appears in Have I Been Pwned breaches (HIBP_API_KEY required)Configuration is passed through the environment: ABUSEIPDB_API_KEY, HIBP_API_KEY. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.
Plenty of cloud and infrastructure servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. AynOps's toolset — headers_analyzer, cve_lookup, cloud_exposure_check and 3 more — is a fair guide to whether it matches your workflow. It is maintained by AynOps; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
| Tool | What it does |
|---|---|
| headers_analyzer | Analyzes HTTP security headers — checks HSTS, CSP, X-Frame-Options, and more with severity ratings and misconfiguration details |
| cve_lookup | Search NVD for known CVEs by software name and version (no API key required) |
| cloud_exposure_check | Checks for publicly accessible AWS S3, Azure Blob Storage, and Google Cloud Storage buckets using common bucket naming patterns derived from the target domain |
| trace_redirects | Traces the full HTTP redirect chain hop by hop — flags TLS downgrades, private-IP leaks, redirect loops, cross-domain hops, and overly long chains |
| robots_txt_inspect | Fetch and parse robots.txt to reveal hidden directories and sitemaps |
| hibp_check | Check if an email or domain appears in Have I Been Pwned breaches (HIBP_API_KEY required) |
**Mac/Linux:**
```json
{
"mcpServers": {
"AynOps": {
"command": "/full/path/to/AynOps/.venv/bin/python3",
"args": ["/full/path/to/AynOps/server.py"],
"env": {
"ABUSEIPDB_API_KEY": "your-api-key-here",
"HIBP_API_KEY": "your-hibp-api-key-here"
}
}
}
}Configuration as documented by the project. Restart the client after saving.
| Variable | Description | Required |
|---|---|---|
| ABUSEIPDB_API_KEY | Credential the server authenticates with. | Yes |
| HIBP_API_KEY | Credential the server authenticates with. | Yes |
Manage your whole Supabase project in conversation — database, auth, storage, Edge Functions and branches.
Stop letting your assistant hallucinate n8n node parameters — this server hands it the real schemas, templates and validation.
AWS Labs' official server suite — current AWS docs, CDK guidance, cost analysis and service tools.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.
Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.