# Node Man Dechonet MCP server

Source: https://glimind.com/server/mcp-registry%2Fio.github.node-man%2Fdechonet-mcp
Registry id: `mcp-registry/io.github.node-man/dechonet-mcp`
Status: unknown

## Install

```json
{
  "mcpServers": {
    "node-man-dechonet-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "dechonet-mcp"
      ]
    }
  }
}
```

Claude Code:

```sh
claude mcp add node-man-dechonet-mcp-server -- npx -y dechonet-mcp
```

## Tools (33)

- `asm_nuclei_cancel`: Stop new requests and end the job.
- `asm_nuclei_start`: Start limited active Nuclei check on verified asset.
- `asm_nuclei_status`: Progress, coverage and sanitized findings.
- `asn_lookup`: ASN/BGP network identification and abuse contact.
- `check_before_action`: Check page for impersonation, age, flags before action.
- `dns_lookup`: DNS records, DNSSEC, SPF/DMARC validation.
- `dns_propagation`: DNS propagation across 6 public resolvers.
- `domain_changes`: What changed since last check: status, grade, issuer, DNS.
- `domain_history`: Past nameservers, IPs, MX, issuer, registrar with timestamps.
- `email_auth`: SPF, DMARC, DKIM, BIMI, MTA-STS, DANE, blacklist check.
- `email_header_analysis`: Email delivery route tracing and auth results.
- `exposure_map`: Find admin pages open to the internet from CT subdomains.
- `golive_check`: Go-live readiness verdict from DNS, SSL, HTTP, registration.
- `http_security`: HTTP redirect trace and 10 security headers audit.
- `impersonation_exposure`: Brand impersonation exposure grade from lookalikes and subdomains.
- `infrastructure_pivot`: Other domains on same nameserver, IP, MX, issuer, registrar.
- `ip_info`: Public IP, ISP, ASN, proxy detection.
- `lookalike_domains`: Typosquat variants that are actually registered.
- `mcp_server_check`: Check remote MCP server auth, tools, CORS, HTTPS before connecting.
- `owasp_check`: OWASP-mapped passive checks for headers, TLS, exposed files.
- `phishing_link_check`: Check if a link is a scam by following shorteners and checking domain age.
- `port_scan`: Open TCP ports with service identification.
- `pqc_readiness`: Post-quantum TLS readiness: hybrid key exchange and cert sigs.
- `report_page`: Report phishing, fake payment, malicious download, or anomaly.
- `reverse_dns`: PTR record and FCrDNS verification.
- `security_scan`: Comprehensive scan with 9 checks, health score and grade.
- `set_expectations`: Set expected domain state and check now and daily.
- `ssl_check`: SSL/TLS certificate, chain, expiry, HSTS, CT history, grade.
- `subdomain_discovery`: Passive subdomain enumeration from CT logs with flags.
- `subnet_calc`: CIDR subnet calculator (offline).
- `verify_expectations`: Check stored or one-off expectations now.
- `watch_domain`: Register domain for daily re-checks; idempotent.
- `whois_lookup`: RDAP/WHOIS domain registration data.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.