mcp

Name: mcp
Author: com.dechonet

MCP serverMCP

30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.

by com.dechonetrepository ↗homepage ↗v1.6.3MIT

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"dechonet-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability110/110 checks ok

Tools observed via MCP handshake

dns_lookup — Query DNS records (A, AAAA, MX, TXT, NS, SOA, CAA) for a domain and validate email-related records, including DNSSEC presence and SPF/DMARC syntax, returning se
ssl_check — Inspect a host's served TLS/SSL certificate and connection: expiry date, issuer, SAN list, chain integrity, revocation (OCSP, then CRL; unknown when neither ans
http_security — Follow a URL's HTTP redirect chain and audit response security headers (CSP, HSTS, X-Frame-Options, COOP, CORP, COEP, Permissions-Policy), grading A+ to F on th
email_auth — Assess a domain's email authentication and deliverability posture: MX records, SPF, DMARC, DKIM (probes 15 common selectors), BIMI, MTA-STS, TLS-RPT, and DANE,
port_scan — Probe a host for a fixed set of common TCP ports (HTTP, HTTPS, SSH, FTP, SMTP, DNS, and common databases) and report which are open, the service name, and the r
dns_propagation — Query one DNS record across 8+ global public resolvers (Google, Cloudflare, Quad9, OpenDNS, and more) simultaneously and report which resolvers return stale ver
reverse_dns — Resolve the PTR (reverse DNS) record for an IPv4 or IPv6 address and verify forward-confirmed reverse DNS (FCrDNS) by checking that the PTR hostname resolves ba
asn_lookup — Look up Autonomous System (ASN) / BGP information for an IP address or AS number: the network operator, announced prefixes, abuse contact, and a classification
whois_lookup — Retrieve domain registration data via RDAP (with WHOIS fallback): registrar, creation/expiry/update dates, nameservers, and EPP status flags, highlighting risk
subdomain_discovery — Enumerate the subdomains of a domain from Certificate Transparency logs — fully passive (no packets are sent to the target; CT logs are public records of every
lookalike_domains — Generate the typosquat/lookalike variants of a domain that phishers actually register — homoglyph swaps (l→1, o→0, rn→m), TLD swaps (.com→.co), character omissi
ip_info — Report information about the caller's own public IP as seen by the server: IPv4/IPv6 address, ISP, ASN, approximate geolocation, and proxy/VPN heuristics. Takes
email_header_analysis — Parse raw email headers to reconstruct the delivery path (each Received hop in order), extract SPF/DKIM/DMARC authentication results, measure per-hop delays, an
subnet_calc — Compute IPv4 subnet details from CIDR notation entirely locally — no network call: network and broadcast addresses, usable host range, total usable hosts, subne
security_scan — One-shot comprehensive audit of a domain, scored 0-100 with an A+ to F grade and a prioritized action list. Five scored areas: the web connection (TLS certifica
owasp_check — Assess a domain's OWASP posture from EXTERNAL OBSERVATION only: the OWASP Secure Headers Project plus the externally observable OWASP Top 10:2025 subset — A04 C
impersonation_exposure — Assess how exposed a domain is to brand impersonation and phishing, PASSIVELY: live typosquat/lookalike domains (homoglyph, omission, transposition, TLD swap) t
domain_changes — Report what has changed for a domain over time — the security regressions and drift that DechoNet's daily monitoring has recorded across every watch on the doma
domain_history — Show how a domain's (or IPv4 address's) infrastructure has changed over time from DechoNet's stored observations: nameservers, A/AAAA, MX, CNAME, certificate is
infrastructure_pivot — Find other domains DechoNet has seen with the same infrastructure value — a nameserver, IP address, MX host, certificate issuer or registrar — with first and la
watch_domain — Start (or reuse) a daily DechoNet watch on a domain so that changes are recorded over time — SSL grade/issuer/expiry, DNS records, HTTP security headers, domain
set_expectations — Record what a domain should show from outside and check it now — HSTS or another header present, DMARC enforcing, an issue key no longer reported, an HTTP or TL
verify_expectations — Check expectations from outside now, with fresh reads: either a stored set by id (from set_expectations — its state is updated and an anonymous set is kept anot
check_before_action — Check the page an agent is about to log in, pay, download from or submit to: whether the address impersonates a brand, how new the domain is, whether DechoNet o
report_page — Report a page to DechoNet: phishing or brand impersonation, a fake payment window (card fields where a payment provider should be), hidden instructions aimed at
golive_check — Check whether a domain is ready to launch or migrate — a go/no-go verdict over five essentials: DNS resolves to an IP, has propagated consistently across global
pqc_readiness — Check whether a website's public TLS endpoint is ready for post-quantum cryptography: does it complete a TLS 1.3 handshake that offers only the hybrid X25519MLK
mcp_server_check — Check a remote MCP server from outside before connecting it to an agent: whether it requires authentication (and publishes OAuth protected-resource metadata, RF
phishing_link_check — Check the links in a suspicious text message (smishing) or e-mail before anyone taps them. Paste the whole message or a single URL: every link is extracted, fol
exposure_map — Map what an organisation exposes to the internet beyond its home page: subdomains from Certificate Transparency logs (plus hosts DechoNet has already observed),

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registrycom.dechonet/mcp

first seen 1 mo ago · fetched 17 h agoopen ↗

Official MCP Registryio.github.node-man/dechonet-mcp

first seen 2 mo ago · fetched 2 d agoopen ↗

npm registrydechonet-mcp

first seen 2 mo ago · fetched 5 h agoopen ↗

Field history (12 recent events)

17 h ago · declared · version → "1.6.3"
2 d ago · declared · summary → "30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots."
2 d ago · declared · publisherName → "com.dechonet"
2 d ago · declared · version → "1.6.0"
2 d ago · declared · description → "30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots."
2 d ago · declared · name → "mcp"
3 d ago · observed · packageFacts → {"name":"dechonet-mcp","registry":"npm","publishedAt":"2026-10-19T12:38:09.745Z","latestVersion":"1.6.3","weeklyDownload
3 d ago · observed · packageFacts → {"name":"dechonet-mcp","registry":"npm","publishedAt":"2026-10-19T09:48:20.544Z","latestVersion":"1.6.2","weeklyDownload
4 d ago · observed · packageFacts → {"name":"dechonet-mcp","registry":"npm","publishedAt":"2026-10-18T13:42:45.602Z","latestVersion":"1.6.1","weeklyDownload
5 d ago · observed · packageFacts → {"name":"dechonet-mcp","registry":"npm","publishedAt":"2026-10-17T14:18:00.896Z","latestVersion":"1.6.0","weeklyDownload
5 d ago · observed · packageFacts → {"name":"dechonet-mcp","registry":"npm","publishedAt":"2026-10-17T10:02:02.187Z","latestVersion":"1.5.16","weeklyDownloa
6 d ago · declared · description → "Moved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp"

when	check	result	http	latency	detail
6 h ago	mcp initialize	ok	200	489 ms	server dechonet 1.6.3 · protocol 2025-06-18 · 30 tools
13 h ago	mcp initialize	ok	200	1308 ms	server dechonet 1.6.3 · protocol 2025-06-18 · 30 tools
23 h ago	mcp initialize	ok	200	623 ms	server dechonet 1.6.3 · protocol 2025-06-18 · 30 tools
32 h ago	mcp initialize	ok	200	594 ms	server dechonet 1.6.3 · protocol 2025-06-18 · 30 tools
2 d ago	mcp initialize	ok	200	123 ms	server dechonet 1.6.3 · protocol 2025-06-18 · 30 tools
2 d ago	mcp initialize	ok	200	1228 ms	server dechonet 1.6.3 · protocol 2025-06-18 · 30 tools
2 d ago	mcp initialize	ok	200	552 ms	server dechonet 1.6.3 · protocol 2025-06-18 · 30 tools
2 d ago	mcp initialize	ok	200	376 ms	server dechonet 1.6.3 · protocol 2025-06-18 · 30 tools
3 d ago	mcp initialize	ok	200	924 ms	server dechonet 1.6.3 · protocol 2025-06-18 · 30 tools
3 d ago	mcp initialize	ok	200	927 ms	server dechonet 1.6.2 · protocol 2025-06-18 · 30 tools

mcp

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from