MacroCyber
Scan what a public site or AI-built app exposes. Returns a signed, exploitability-graded claim.
Should I use this
Quality & Safety
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"attack-surface": {
"url": "https://macrocyber.co/api/mcp"
}
}
}Remote endpoints
https://macrocyber.co/api/mcpstreamable-httpWhat it can do
Tool inventory
Tools (1)
🟢macrocyber_exposure_claim(url)
Run a passive, external attack-surface assessment of a public website and return a signed, exploitability-graded exposure claim: an SSVC decision (Act, Attend, or Track), a folded score and letter grade, the observed enablers (each with its evidence, reachability, and CWE/OWASP/LLM/ASI taxonomy), and any composed attack-path chains. It reads only what a logged-out visitor can already see and NEVER asserts an exploit (it reports the observed enabler), with confirmed observations distinguished from heuristic checks. Use it to check what a public website or web app exposes to the internet, for example right after deploying an AI-built app. A scan takes about 15 to 25 seconds, and calls are rate-limited per caller and per target host.
Input Schema
{
"type": "object",
"properties": {
"url": {
"type": "string",
"description": "The target host or URL to assess, e.g. https://example.com"
}
},
"required": [
"url"
],
"additionalProperties": false
}Community
Evidence