Bastion: External Attack Surface Monitoring
Ask your AI assistant about your attack surface: run scans, catch expiring certificates and domains, triage findings, and generate reports.
Ads
Overview
Attack Surface Scan ships a hosted MCP server, so Claude and other AI agents can run scans, read findings, watch the change feed, triage and pull PDF reports. All of it in chat, against the domains your account has verified, with nothing to install and no API keys to manage. Every client follows the same handshake: point it at the endpoint, a browser window opens Attack Surface Scan's consent page, sign in and click Allow access. You need a Attack Surface Scan account (the trial works) but no keys or extra setup.
Installation
claude mcp add --transport http afs https://mcp.attacksurfacescan.com/mcp
Configuration
{
"mcpServers": {
"afs": {
"url": "https://mcp.attacksurfacescan.com/mcp"
}
}
}Capabilities
- Run on-demand scans
Ask your assistant to `start_scan` on a verified hostname and return the `scanId` for tracking.
- Review scan results
Pull full findings, evidence, remediation steps, and posture score via `get_scan` for any completed scan.
- Monitor estate changes
Use `list_changes` to see what moved across subdomains, DNS, ports, certificates, or findings since a given date.
- Manage finding triage
Acknowledge, mute, or accept a finding on a target with `set_triage`, including optional notes and expiration.
- Generate PDF reports
Request `get_report` for a completed scan and receive a download link, or poll with `check_report` if rendering takes longer.
- Organize client workspaces
On MSP plans, file domains under clients with `assign_domain_client` and summarize an estate's posture via `list_clients`.
Tags
- cloud-infrastructure
Related MCP servers
Metabase
OfficialOfficial Metabase MCP server for searching data, building queries on the semantic layer, and visualizing results through MCP clients.
AWS CloudTrail
OfficialThis AWS Labs Model Context Protocol (MCP) server for CloudTrail enables your AI agents to query AWS account activity for security investigations, compliance auditing, and operational troubleshooting.
AWS Bedrock KB Retrieval
OfficialQuery Amazon Bedrock Knowledge Bases using natural language to retrieve relevant information from your data sources.
AWS CDK
OfficialGet prescriptive CDK advice, explain CDK Nag rules, check suppressions, generate Bedrock Agent schemas, and discover AWS Solutions Constructs patterns.