node-man/dechonet-mcp

**dechonet.com** · Remote MCP (no install) · Phishing link check · Free web tools · HTTP API · Detection benchmark · Status
Domain security reconnaissance for AI agents via the Model Context Protocol.
**29 tools. No API key needed for non-commercial use.** Phishing/smishing link checks, exposed admin page checks (admin screens, test servers, dev tools left open), DNS, SSL/TLS, post-quantum TLS readiness, HTTP security headers, email authentication, port scan, DNS propagation, reverse DNS, ASN/BGP, RDAP/WHOIS, subdomain discovery (CT logs), lookalike/typosquat detection, OWASP-mapped observable checks, brand-impersonation exposure, go-live readiness, **domain change history** — what changed since the last check — **infrastructure history and pivots** (past nameservers/IPs/issuers, and other domains seen on the same rare infrastructure), and a daily **watch** you can set from the agent.
Every result comes back interpreted, not just as raw JSON: a status, the key numbers, each issue with severity and confidence, and the concrete action to take. That is what an agent needs to tell a human what to do next.
**Part of DechoNet.** Every tool here is also a free web tool at **dechonet.com** — no sign-up — backed by error-fix guides. This package brings the same checks to AI agents.
Zero-install: remote endpoint
No npx, no install. Point any MCP client that speaks Streamable HTTP at:
| Client | How to connect |
|---|---|
| Claude Code | claude mcp add --transport http dechonet https://dechonet.com/mcp |
| Claude app / Desktop | Listed in the Claude connectors directory: Customize → Connectors, search DechoNet → Connect. Or + Add → Add custom connector with the URL (Free plan: one custom connector) |
| ChatGPT | chatgpt.com/plugins → + → Add custom MCP server → URL under Connection, no authentication → Create as a plugin (work/school accounts need an admin to allow custom MCP servers) |
| Cursor | ~/.cursor/mcp.json: {"mcpServers":{"dechonet":{"url":"https://dechonet.com/mcp"}}} |
| VS Code (Copilot agent mode) | .mcp.json at the workspace root: {"mcpServers":{"dechonet":{"type":"http","url":"https://dechonet.com/mcp"}}} (in .vscode/mcp.json the root key is servers) |
| Gemini CLI | gemini mcp add --transport http dechonet https://dechonet.com/mcp (in settings.json use httpUrl, not url) |
| Codex | codex mcp add dechonet --url https://dechonet.com/mcp |
| Windsurf | ~/.codeium/windsurf/mcp_config.json: {"mcpServers":{"dechonet":{"serverUrl":"https://dechonet.com/mcp"}}} |
| Any stdio-only client | npm package — see Quick Start below |
Step-by-step for each client: dechonet.com/mcp. The remote endpoint also serves 3 curated prompts (audit_domain, monitor_setup, investigate_changes) and 2 reference resources.
Quick Start (stdio, Claude Desktop)
Add to your claude_desktop_config.json:
Config file location:
- **macOS**: ~/Library/Application Support/Claude/claude_desktop_config.json
- **Windows**: %APPDATA%\Claude\claude_desktop_config.json
Restart Claude Desktop; DechoNet shows up in the chat input's tools menu. (Claude Desktop can also skip the install and add https://dechonet.com/mcp as a custom connector — see the table above.)
Install
Available Tools
| Tool | Description |
|------|-------------|
| phishing_link_check | **Is this link a scam?** — paste a text message or URL; follows shorteners, checks domain age, Korean brand impersonation, APK downloads, phishing feeds |
| exposure_map | **Admin pages open to the internet?** — subdomains from CT, each opened once: admin screens, staging, dev tools, VPN logins, default pages, directory listings (counts; per-host detail for the verified owner on the web report) |
| security_scan | **Comprehensive scan** — 9 checks in parallel, 0-100 Health Score, A-F grade |
| dns_lookup | DNS records + DNSSEC + SPF/DMARC validation |