$ loading_
Scans Express.js routes and inventories public versus authenticated endpoints for audits.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "express-recon-mcp" yet — see the docs or source repo.
Scan all routes in the current Express.js project, output an endpoint inventory, and mark each route as public or authenticated.
A complete route list with path, method, auth status, and brief notes.
Perform a security audit of this Express app's route surface, identifying all public endpoints and potential risks.
A list of public endpoints and routes that may need additional auth or access control.
Turn the Express.js route scan results into a structured documentation-ready summary, grouped by module and annotated with auth status.
A module-grouped route summary ready for API docs or audit reports.
Scan MCP tool descriptions for prompt injection and privilege escalation risks.
Audit MCP configs for exposed access, secrets, models, and compliance AI-BOMs.
Scan configured MCP servers locally and generate inventory with risk scores.
Scan MCP servers for runtime, static, config, dependency, and compliance risks.
Scan codebases for LLM usage, AI frameworks, and exposed secrets.
Scan codebases for secrets, SAST issues, vulnerable dependencies, and IaC risks.