$ loading_
Run scope-aware bug bounty and reconnaissance workflows through an MCP server.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "MoonMCP" yet — see the docs or source repo.
Using the authorized scope provided, run a scope-aware reconnaissance workflow against the target assets and return only findings that are within scope.
A reconnaissance summary containing only in-scope targets and findings.
If compatible security reconnaissance CLI tools are available in the current environment, use them to augment the workflow; otherwise complete the task with the default capabilities.
An output describing which available tools were used and the resulting reconnaissance findings.
Start an out-of-the-box baseline reconnaissance workflow for a new bug bounty target and indicate which steps run on the Python standard library alone.
A baseline reconnaissance result showing default capabilities and optional enhancements.
Security researchers or developers can use it for scope-aware initial reconnaissance after receiving an authorized target. It helps reduce out-of-scope analysis and starts with a baseline workflow that can be extended when more tools are available.
When the environment is minimal or dependencies are limited, it can run out of the box on the Python standard library. If common CLI tools are already installed, it can augment the workflow automatically.
When you need to plug reconnaissance into an MCP-compatible AI workflow, it can be used as an MCP server. This provides one interface for baseline reconnaissance and optional tool-based enhancements.
It is an MCP server for bug bounty and reconnaissance work with scope-aware behavior. It works out of the box and augments itself when your preferred CLI tools are present.
The description says it works out of the box on the Python standard library, so a Python environment is the basic prerequisite. For exact installation steps or version requirements, see the source repository.
It is not just a reconnaissance tool; it exposes its capabilities as an MCP server and is scope-aware. Another difference is that it works by default and can enhance itself with existing CLI tools when available.
Scan MCP tool descriptions for prompt injection and privilege escalation risks.
Scan MCP servers for runtime, static, config, dependency, and compliance risks.
Give AI auditable, scoped database access for safer querying and analysis.
Scan configured MCP servers locally and generate inventory with risk scores.
Review fleet-wide vulnerability and PII scan findings with natural language.
Query bug bounty programs and scopes across multiple platforms from one interface.