Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Classify an input as a domain, IP, package, repository, etc. No network calls — instant response. Useful for understanding what an asset is before performing a full lookup.
The input to classify
Interpret as this asset type, preserving the same normalization as lookup.
Classify an input as a domain, IP, package, repository, etc. No network calls — instant response. Useful for understanding what an asset is before performing a full lookup.
| Argument | Type | Description |
|---|---|---|
| input* | string | The input to classify |
| asset_type | string | Interpret as this asset type, preserving the same normalization as lookup. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"input"
],
"properties": {
"input": {
"type": "string",
"description": "The input to classify"
},
"asset_type": {
"enum": [
"domain",
"ipv4",
"ipv6",
"url",
"email",
"cidr",
"asn",
"package",
"repository",
"container",
"cloud-resource",
"mobile-app",
"hardware",
"extension",
"desktop-app",
"organization"
],
"type": "string",
"description": "Interpret as this asset type, preserving the same normalization as lookup."
}
}
}Find security reporting channels for responsible vulnerability disclosure. Takes a domain, IP, URL, package name, repository, container image, mobile app, hardware device, browser extension, desktop app, or organization name. Returns bug bounty programs, security.txt contacts, VDP links, abuse contacts, and national/global CERT fallbacks ordered by applicability to the queried owner and asset. This is informational only — not legal advice.
| Argument | Type | Description |
|---|---|---|
| asset* | string | The asset to look up. Examples: "cloudflare.com", "8.8.8.8", "npm:express", "gh:facebook/react", "app:WhatsApp", "hw:Cisco ASA 5505" |
| asset_type | string | Force a specific asset type. Auto-detected if omitted. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"asset"
],
"properties": {
"asset": {
"type": "string",
"description": "The asset to look up. Examples: \"cloudflare.com\", \"8.8.8.8\", \"npm:express\", \"gh:facebook/react\", \"app:WhatsApp\", \"hw:Cisco ASA 5505\""
},
"asset_type": {
"enum": [
"domain",
"ipv4",
"ipv6",
"url",
"email",
"cidr",
"asn",
"package",
"repository",
"container",
"cloud-resource",
"mobile-app",
"hardware",
"extension",
"desktop-app",
"organization"
],
"type": "string",
"description": "Force a specific asset type. Auto-detected if omitted."
}
}
}