# Nan786521 Recon Kit MCP server

Source: https://glimind.com/server/mcp-registry%2Fio.github.nan786521%2Frecon-kit-mcp
Registry id: `mcp-registry/io.github.nan786521/recon-kit-mcp`
Status: unknown

## Install

```json
{
  "mcpServers": {
    "nan786521-recon-kit-mcp-server": {
      "command": "uvx",
      "args": [
        "recon-kit-mcp"
      ]
    }
  }
}
```

Claude Code:

```sh
claude mcp add nan786521-recon-kit-mcp-server -- uvx recon-kit-mcp
```

## Tools (13)

- `cookie_audit`: Redirect chain + cookie flags (Secure / HttpOnly / SameSite), graded.
- `cors_check`: CORS policy probe — flags arbitrary-Origin reflection and wildcard misuse.
- `dns_recon`: DNS + WHOIS + email security (SPF/DMARC/DKIM), graded.
- `http_headers_audit`: HTTP security headers (CSP, HSTS, X-Frame-Options, …), graded.
- `http_methods_audit`: Report which HTTP methods a server allows and grade the risk (TRACE/PUT/DELETE).
- `ip_info`: Resolves the host and enriches its IP via RDAP (owner, country, CIDR, abuse).
- `port_scan`: TCP port scan of one host (≤1024 ports/call), open ports + services.
- `recon_report`: Runs DNS/email, TLS, HTTP-header, web-stack, and apex subdomain-takeover checks together and returns an overall grade.
- `subdomain_enum`: Discover subdomains via DNS brute-force and/or Certificate Transparency logs.
- `subdomain_takeover`: Check subdomains for a dangling-CNAME takeover risk against known services.
- `tech_detect`: Fingerprint the web stack (server, CDN/WAF, language, framework, CMS, JS) from one GET.
- `tls_check`: Certificate, protocols, ciphers, and known TLS vulnerabilities, graded.
- `well_known_audit`: Fetches & parses security.txt (RFC 9116) and robots.txt.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.