Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Connect Remote server
claude mcp add --transport http attack-surface https://macrocyber.co/api/mcp
{
"mcpServers": {
"attack-surface": {
"url": "https://macrocyber.co/api/mcp"
}
}
}
{
"servers": {
"attack-surface": {
"type": "http",
"url": "https://macrocyber.co/api/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://macrocyber.co/api/mcp
Tools 2 found in our last check
macrocyber_exposure_claimRun a passive, external attack-surface scan of a public website and return a signed, exploitability-graded exposure claim. The claim holds: an SSVC decision (Act, Attend or Track); a 0-100 risk score (higher is worse) and letter grade; the observed enablers, each with evidence,…
macrocyber_verify_fixesRe-check the site of an earlier MacroCyber report and return a fresh signed exposure claim plus a comparison with that report: resolved, still open, new, and not re-checked. An issue counts as resolved only when this scan re-ran the check that found it, at the same place, and it…
Details
| Endpoint | https://macrocyber.co/api/mcp (Streamable HTTP) |
| First published | 17 Oct 2026 |
| Last updated | 17 Oct 2026 |
| Registry name | co.macrocyber/attack-surface |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
