Bastion: External Attack Surface Monitoring
Attack Surface Scan ships a hosted MCP server, so Claude and other AI agents can run scans, read findings, watch the change feed, triage and pull PDF reports. All of it in chat, against the domains your account has verified, with nothing to install and no API keys to manage. Every client follows the same handshake: point it at the endpoint, a browser window opens Attack Surface Scan's consent page, sign in and click Allow access. You need a Attack Surface Scan account (the trial works) but no keys or extra setup.
Ads
Overview
Attack Surface Scan ships a hosted MCP server, so Claude and other AI agents can run scans, read findings, watch the change feed, triage and pull PDF reports. All of it in chat, against the domains your account has verified, with nothing to install and no API keys to manage. Every client follows the same handshake: point it at the endpoint, a browser window opens Attack Surface Scan's consent page, sign in and click Allow access. You need a Attack Surface Scan account (the trial works) but no keys or extra setup.
Capabilities
- start_scan
Run on-demand scans — Ask your assistant to `start_scan` on a verified hostname and return the `scanId` for tracking.
- get_scan
Review scan results — Pull full findings, evidence, remediation steps, and posture score via `get_scan` for any completed scan.
- list_changes
Monitor estate changes — Use `list_changes` to see what moved across subdomains, DNS, ports, certificates, or findings since a given date.
- set_triage
Manage finding triage — Acknowledge, mute, or accept a finding on a target with `set_triage`, including optional notes and expiration.
- get_report
Generate PDF reports — Request `get_report` for a completed scan and receive a download link, or poll with `check_report` if rendering takes longer.
- assign_domain_client
Organize client workspaces — On MSP plans, file domains under clients with `assign_domain_client` and summarize an estate's posture via `list_clients`.
Installation
claude mcp add --transport http afs https://mcp.attacksurfacescan.com/mcp
Configuration
{
"mcpServers": {
"afs": {
"url": "https://mcp.attacksurfacescan.com/mcp"
}
}
}Paste into ~/.cursor/mcp.json or .cursor/mcp.json
Tags
- cloud-infrastructure
Related MCP servers
Cloud Platforms
Metabase
Metabase includes a built-in Model Context Protocol (MCP) server that lets AI clients connect directly to a Metabase instance. It uses the [Streamable HTTP transport](https://modelcontextprotocol.io/specification/2025-03-26/basic/transportsstreamable-http) and builds on Metabase's Agent API to expose tools for searching, navigating, querying, visualizing, and creating/updating content - all scoped to the connecting user's permissions. The legacy /api/mcp path still works as an alias for existing clients, but /api/metabase-mcp is the canonical URL to advertise.
6 tools · construct_query, create_dashboard
Cloud Platforms
AWS Bedrock KB Retrieval
MCP server for accessing Amazon Bedrock Knowledge Bases - Find and explore all available knowledge bases - Search for knowledge bases by name or tag - List data sources associated with each knowledge base - Retrieve information using conversational queries - Get relevant passages from your knowledge bases - Access citation information for all results - Focus your queries on specific data sources - Include or exclude specific data sources - Prioritize results from specific data sources - Improve relevance of retrieval results - Use Amazon Bedrock reranking capabilities - Sort results by relevance to your query
4 tools · Filter results by data source, list_knowledge_bases
Cloud Platforms
AWS CloudTrail
This AWS Labs Model Context Protocol (MCP) server for CloudTrail enables your AI agents to query AWS account activity for security investigations, compliance auditing, and operational troubleshooting. It provides comprehensive access to CloudTrail events and CloudTrail Lake analytics, allowing agents to track API calls, analyze user activity, and perform advanced security analysis. This server gives AI agents seamless access to CloudTrail data through standardized MCP interfaces, eliminating the need for custom API integrations and enabling powerful security insights and audit capabilities.
4 tools · get_query_status, lake_query
Cloud Platforms
AWS Cost Analysis
Analyze CDK projects to identify AWS services used and get pricing information from AWS pricing webpages and API.
Cloud Platforms
AWS CDK
Get prescriptive CDK advice, explain CDK Nag rules, check suppressions, generate Bedrock Agent schemas, and discover AWS Solutions Constructs patterns.
Cloud Platforms
AWS Core
Core AWS MCP server providing prompt understanding and server management capabilities.
Cloud Platforms
Stripe MCP
This repo is the one-stop shop for building AI-powered products and businesses on top of Stripe. It contains a collection of SDKs to help you integrate Stripe with LLMs and agent frameworks, including: @stripe/ai-sdk - for integrating Stripe's billing infrastructure with Vercel's ai and @ai-sdk libraries. @stripe/token-meter - for integrating Stripe's billing infrastructure with native SDKs from OpenAI, Anthropic, and Google Gemini, without any framework dependencies. Stripe hosts a remote MCP server at https://mcp.stripe.com. This allows secure MCP client access via OAuth. View the docs here.
6 tools · Add Stripe plugin to Codex, Build autonomous agents
Cloud Platforms
MiniMax MCP
> 💡 Recommended: MiniMax CLI (mmx-cli) — our official command-line tool with the latest models and additional features including text, vision, and search. Works as an AI agent skill for Claude Code, Cursor, OpenClaw, etc. - 中文文档 - MiniMax-MCP-JS - Official JavaScript implementation of MiniMax MCP 1. Get your API key from MiniMax. 2. Install uv (Python package manager), install with curl -LsSf https://astral.sh/uv/install.sh | sh or see the uv repo for additional install methods. 3. Important: The API host and key vary by region and must match; otherwise, you'll encounter an Invalid API key error.
6 tools · generate_video, list_voices