# nan786521/recon-mcp

Source: https://glimind.com/server/glama%2Fnan786521%2Frecon-mcp
Registry id: `glama/nan786521/recon-mcp`
Status: unknown

## Tools (13)

- `cookie_audit`: Checks redirect chain and cookie flags (Secure, HttpOnly, SameSite) and grades them.
- `cors_check`: Probes CORS policy, flags arbitrary-Origin reflection and wildcard misuse.
- `dns_recon`: Performs DNS, WHOIS, and email security (SPF/DMARC/DKIM) checks with a graded assessment.
- `http_headers_audit`: Audits HTTP security headers (CSP, HSTS, X-Frame-Options, etc.) and grades them.
- `http_methods_audit`: Reports which HTTP methods a server allows and grades the risk (TRACE/PUT/DELETE).
- `ip_info`: Resolves the host and enriches its IP via RDAP (owner, country, CIDR, abuse).
- `port_scan`: TCP port scan of one host (≤1024 ports/call), returns open ports and services.
- `recon_report`: Runs DNS/email, TLS, HTTP-header, web-stack, and apex subdomain-takeover checks together and returns an overall grade, summary, components, tech, and takeover s
- `subdomain_enum`: Discovers subdomains via DNS brute-force and/or Certificate Transparency logs.
- `subdomain_takeover`: Checks subdomains for dangling-CNAME takeover risk against known services.
- `tech_detect`: Fingerprints the web stack (server, CDN/WAF, language, framework, CMS, JS) from one GET.
- `tls_check`: Checks certificate, protocols, ciphers, and known TLS vulnerabilities, graded.
- `well_known_audit`: Fetches and parses security.txt (RFC 9116) and robots.txt.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.