Install attack-surface-mcp-server for Claude Desktop
Claude Desktop reads mcpServers from claude_desktop_config.json. Restart the app after saving.
- Open ~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows, or ~/.config/Claude/claude_desktop_config.json on Linux.
- Paste the JSON config below.
- Replace placeholder secrets, then restart the client if it does not reload on its own.
~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"cyanheads-attack-surface-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/attack-surface-mcp-server@0.4.0"
],
"env": {
"SHODAN_API_KEY": "YOUR_SHODAN_API_KEY",
"CERTSPOTTER_API_KEY": "YOUR_CERTSPOTTER_API_KEY",
"ATTACKSURFACE_DEFAULT_RESOLVERS": "8.8.8.8,1.1.1.1,9.9.9.9",
"ATTACKSURFACE_HTTP_USER_AGENT": "",
"ATTACKSURFACE_MAX_SUBDOMAINS": "200",
"ATTACKSURFACE_RDAP_BOOTSTRAP_URL": "https://rdap.org",
"ATTACKSURFACE_ALLOW_PRIVATE_TARGETS": "false",
"MCP_LOG_LEVEL": "info"
}
}
}
}