AI & MemoryMCP Registrynpm33 toolsB · 77

Dechonet MCP

Name: Dechonet MCP
Author: dechonet.com

com.dechonet · Updated today

30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.

At a glance

Dechonet MCP is an MCP server in the AI & Memory category. It runs locally over stdio via `npx -y dechonet-mcp`, and needs DECHONET_API_KEY and DECHONET_SESSION_COOKIE. It exposes 33 tools, including phishing_link_check, exposure_map and security_scan. It scores B (77/100) on the MCP Skills Hub health score as of Oct 28, 2026.

Source 1

One-click install

VS Code VS Code Insiders Cursor

Opens your editor and pre-fills the config. Your editor will ask before adding it.

How to install Dechonet MCP in your AI client

Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.

How to install Dechonet MCP in Claude CodeAnthropic's agentic CLI

Add the server

bash

claude mcp add dechonet -e 'DECHONET_API_KEY=<DECHONET_API_KEY>' -e 'DECHONET_SESSION_COOKIE=<DECHONET_SESSION_COOKIE>' -- npx -y dechonet-mcp

Fill in your credentials
Replace <DECHONET_API_KEY>, <DECHONET_SESSION_COOKIE> with your real values. Keep secrets out of any config file you commit.
3
Verify it's connected
bash
```
claude mcp list
```
Sharing it with your team?
Add `--scope project` to write it to .mcp.json in the repository root, which you can commit (with the secrets left as environment variables).
Use it in a session
Ask Claude to use the tools this server exposes (e.g. phishing_link_check, exposure_map, security_scan). It discovers them automatically.

How to install Dechonet MCP in Claude DesktopDesktop app (MCP config)

Open your MCP config
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

Add this server

json

{
  "mcpServers": {
    "dechonet": {
      "command": "npx",
      "args": [
        "-y",
        "dechonet-mcp"
      ],
      "env": {
        "DECHONET_API_KEY": "<DECHONET_API_KEY>",
        "DECHONET_SESSION_COOKIE": "<DECHONET_SESSION_COOKIE>"
      }
    }
  }
}

Fill in your credentials
Replace <DECHONET_API_KEY>, <DECHONET_SESSION_COOKIE> with your real values. Keep secrets out of any config file you commit.
Restart Claude Desktop
The tools appear under the 🔌 menu once the app reloads.

How to install Dechonet MCP in CursorAI-first code editor

Create / edit .cursor/mcp.json in your project

json

{
  "mcpServers": {
    "dechonet": {
      "command": "npx",
      "args": [
        "-y",
        "dechonet-mcp"
      ],
      "env": {
        "DECHONET_API_KEY": "<DECHONET_API_KEY>",
        "DECHONET_SESSION_COOKIE": "<DECHONET_SESSION_COOKIE>"
      }
    }
  }
}

Fill in your credentials
Replace <DECHONET_API_KEY>, <DECHONET_SESSION_COOKIE> with your real values. Keep secrets out of any config file you commit.
Enable it
Cursor Settings → MCP → toggle the server on. Tools become available to the Composer/Agent.

How to install Dechonet MCP in Codex CLIOpenAI coding agent

Add to ~/.codex/config.toml

toml

[mcp_servers.dechonet]
command = "npx"
args = ["-y", "dechonet-mcp"]
env = { DECHONET_API_KEY = "<DECHONET_API_KEY>", DECHONET_SESSION_COOKIE = "<DECHONET_SESSION_COOKIE>" }

Fill in your credentials
Replace <DECHONET_API_KEY>, <DECHONET_SESSION_COOKIE> with your real values. Keep secrets out of any config file you commit.
Run Codex
Codex loads MCP servers from config.toml on startup and exposes their tools to the agent.

How to install Dechonet MCP in WindsurfCodeium's agentic IDE

Edit ~/.codeium/windsurf/mcp_config.json

json

{
  "mcpServers": {
    "dechonet": {
      "command": "npx",
      "args": [
        "-y",
        "dechonet-mcp"
      ],
      "env": {
        "DECHONET_API_KEY": "<DECHONET_API_KEY>",
        "DECHONET_SESSION_COOKIE": "<DECHONET_SESSION_COOKIE>"
      }
    }
  }
}

Fill in your credentials
Replace <DECHONET_API_KEY>, <DECHONET_SESSION_COOKIE> with your real values. Keep secrets out of any config file you commit.
Reload
Windsurf → Cascade → refresh MCP servers. Cascade can now call the tools.

How to install Dechonet MCP in ClineVS Code autonomous agent

Open Cline → MCP Servers → Configure
Adds to cline_mcp_settings.json.

Add the server

json

{
  "mcpServers": {
    "dechonet": {
      "command": "npx",
      "args": [
        "-y",
        "dechonet-mcp"
      ],
      "env": {
        "DECHONET_API_KEY": "<DECHONET_API_KEY>",
        "DECHONET_SESSION_COOKIE": "<DECHONET_SESSION_COOKIE>"
      }
    }
  }
}

Fill in your credentials
Replace <DECHONET_API_KEY>, <DECHONET_SESSION_COOKIE> with your real values. Keep secrets out of any config file you commit.

How to install Dechonet MCP in VS CodeCopilot / MCP support

Create .vscode/mcp.json

json

{
  "servers": {
    "dechonet": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "dechonet-mcp"
      ],
      "env": {
        "DECHONET_API_KEY": "<DECHONET_API_KEY>",
        "DECHONET_SESSION_COOKIE": "<DECHONET_SESSION_COOKIE>"
      }
    }
  }
}

Fill in your credentials
Replace <DECHONET_API_KEY>, <DECHONET_SESSION_COOKIE> with your real values. Keep secrets out of any config file you commit.
Start it
VS Code shows a ▶ Start action above the server entry. Agent mode (Copilot Chat) can then use the tools.

What does Dechonet MCP need from you?

API key — Optional free API key (dechonet.com account page): own rate limits; required for infrastructure_pivot

DECHONET_URLoptionalEnvironment variable
API base URL (default: https://dechonet.com)
DECHONET_LOCALEoptionalEnvironment variable
Response language: en or ko (default: en)
DECHONET_API_KEYoptionalsecretEnvironment variable
Optional free API key (dechonet.com account page): own rate limits; required for infrastructure_pivot
DECHONET_SESSION_COOKIEoptionalsecretEnvironment variable
Optional: your own DechoNet login cookie (dn_acct), only for the signed-in tools (Business-plan Nuclei checks, investigator cases)

Pass secrets through your shell environment rather than committing them into a config file.

What tools does Dechonet MCP expose? (33)

Taken from the project's README — the server itself was not queried, so check its docs for the exact schemas.

phishing_link_checkIs this link a scam? — paste a text message or URL; follows shorteners, checks domain age, Korean brand impersonation, APK downloads, phishing feeds
exposure_mapAdmin pages open to the internet? — subdomains from CT, each opened once: admin screens, staging, dev tools, VPN logins, default pages, directory listings (counts; per-host detail for the verified owner on the web report)
security_scanComprehensive scan — 9 checks in parallel, 0-100 Health Score, A-F grade
dns_lookupDNS records + DNSSEC + SPF/DMARC validation
ssl_checkSSL/TLS certificate, chain, expiry, HSTS, CT history, A-F grade
http_securityHTTP redirect trace + 10 security headers audit, A-F grade
email_authSPF, DMARC, DKIM, BIMI, MTA-STS, DANE + blacklist check
port_scanOpen TCP ports with service identification
dns_propagationDNS propagation across 6 public resolvers
reverse_dnsPTR record + FCrDNS verification
asn_lookupASN/BGP network identification + abuse contact
whois_lookupRDAP/WHOIS domain registration data
subdomain_discoveryPassive subdomain enumeration from CT logs, operational-name flags (dev/staging/admin), wildcard detection
lookalike_domainsTyposquat variants that are actually registered — homoglyph, affix (brand-login), TLD swap, keyboard slips — with the domain's own defensive registrations separated out
owasp_checkOWASP-mapped checks that can be observed passively (headers, TLS, exposed files), honest about what is out of scope
impersonation_exposureBrand impersonation exposure grade: third-party lookalikes + exposed operational subdomains + wildcard certs
golive_checkGo-live readiness — DNS, propagation, SSL, HTTP, registration in one READY / CAUTION / NOT READY verdict
domain_historyPast nameservers, A/AAAA, MX, certificate issuer, registrar (and an IP's ASN/PTR) with first and last seen — from DechoNet's own observations, not passive DNS
infrastructure_pivotOther domains DechoNet saw with the same nameserver, IP, MX, issuer or registrar. Needs a free API key (`DECHONET_API_KEY`); shared infrastructure returns a count only
domain_changesWhat changed since the last check — status, grade, issuer, DNS, issues. Works from lookup history even without a watch
pqc_readinessPost-quantum TLS readiness: hybrid X25519MLKEM768 key exchange, whether the origin server or a CDN edge provides it, certificate signature algorithms. External indicator, not a full PQC audit
mcp_server_checkBefore you connect a remote MCP server: authentication and OAuth metadata, tools that act (commands, files, messages, payments, secrets), agent-steering text in tool descriptions, CORS/Origin, HTTPS. Initialize and tools/list only — no tool
watch_domainRegister a domain for daily re-checks (SSL, DNS, HTTP, RDAP) so `domain_changes` accumulates a timeline. Writes a watch; idempotent
set_expectationsState what a domain should show from outside (a header present, DMARC enforcing, an issue gone, a grade, certificate days, DNS records, HTTPS answering), check it now with fresh reads and every day after. Each result comes with a signed obs
check_before_actionBefore logging in, paying, downloading or submitting: whether the page impersonates a brand, how new the domain is, whether it was flagged before, and — when the caller reports the page structure as host names — whether the card fields sit
report_pageReport a page (phishing, fake payment window, hidden instructions for AI agents, malicious download, or a verdict that looks wrong), an MCP server whose tool descriptions steer agents, or a network anomaly (the certificate or addresses you
verify_expectationsCheck a stored set (by id) or a one-off list from outside now — after a change, to see whether it is visible yet
ip_infoPublic IP, ISP, ASN, proxy detection
email_header_analysisEmail delivery route tracing + auth results
subnet_calcCIDR subnet calculator (offline)
asm_nuclei_startStart a limited active check (Nuclei) on a verified asset from your attack-surface report. Needs current DNS TXT ownership, the exact root URL from that report and `confirm: "asm-nuclei-v2"`. Automatically runs `asm_verify` before creating
asm_nuclei_statusProgress, coverage and sanitized findings. Partial or failed is not a clean result; technology detection is not proof of a vulnerability. Never starts requests
asm_nuclei_cancelStop new requests and end the job. Requests already sent cannot be recalled

What the code can do

Read from the published package source — never executed. Parsed 4 of 4 source files.

This server can make network requests and read your environment variables.

How it was published

Published by a verified CI identity (github trusted publishing) rather than a personal token.
Has a provenance attestation tying this artifact to the commit it was built from.
1 npm maintainer — a single point of compromise · last published by GitHub Actions.

Maintainer of this package and think something here is wrong? Tell us and we'll correct it.

Before you install

Signals gathered from the source repo and package registry — not a safety verdict.

What it can reach

Runs code on your machine — Executes as a local process with your user's permissions, including filesystem access.
Downloads at launch — The package is fetched from its registry each run unless you pin a version.

Last commit today — Actively maintained.
1 GitHub stars — Very little community usage so far.
No license declared — Without a license the code is not legally reusable in a commercial project.

Client compatibility

Claude Code: NativeClaude Desktop: NativeCursor: NativeCodex CLI: NativeWindsurf: NativeCline: NativeVS Code: Native

Health score

B · 77

Maintenance, adoption, transparency and packaging — not a safety audit. How this is calculated

Maintenance30%100%
Last commit 0 days ago.
Adoption20%9%
1 stars.
Transparency20%75%
3/4: ✓ public source repo, ✗ declared license, ✓ documentation, ✓ discoverable tool list.
Provenance15%100%
Package and registry entry point at the same repository.
Packaging15%100%
Publishes a pinned version (1.6.4).

Documentation

Full README

DechoNet MCP Server

[dechonet.com](https://dechonet.com) · Remote MCP (no install) · Phishing link check · Free web tools · HTTP API · Detection benchmark · Status

Domain security reconnaissance for AI agents via the Model Context Protocol.

30 tools. No API key needed for non-commercial use. Phishing/smishing link checks, exposed admin page checks (admin screens, test servers, dev tools left open), DNS, SSL/TLS, post-quantum TLS readiness, HTTP security headers, email authentication, port scan, DNS propagation, reverse DNS, ASN/BGP, RDAP/WHOIS, subdomain discovery (CT logs), lookalike/typosquat detection, OWASP-mapped observable checks, brand-impersonation exposure, go-live readiness, MCP server checks before you connect one, domain change history — what changed since the last check — infrastructure history and pivots (past nameservers/IPs/issuers, and other domains seen on the same rare infrastructure), and a daily watch you can set from the agent.

Every result comes back interpreted, not just as raw JSON: a status, the key numbers, each issue with severity and confidence, and the concrete action to take. That is what an agent needs to tell a human what to do next.

Part of [DechoNet](https://dechonet.com). Every tool here is also a free web tool at [dechonet.com](https://dechonet.com) — no sign-up — backed by error-fix guides. This package brings the same checks to AI agents.

Zero-install: remote endpoint

No npx, no install. Point any MCP client that speaks Streamable HTTP at:

text

https://dechonet.com/mcp

| Client | How to connect | |---|---| | Claude Code | claude mcp add --transport http dechonet https://dechonet.com/mcp | | Claude app / Desktop | Listed in the Claude connectors directory: Customize → Connectors, search DechoNet → Connect. Or + Add → Add custom connector with the URL (Free plan: one custom connector) | | ChatGPT | chatgpt.com/plugins → + → Add custom MCP server → URL under Connection, no authentication → Create as a plugin (work/school accounts need an admin to allow custom MCP servers) | | Cursor | ~/.cursor/mcp.json: {"mcpServers":{"dechonet":{"url":"https://dechonet.com/mcp"}}} | | VS Code (Copilot) | Command Palette → MCP: Add Server → HTTP → https://dechonet.com/mcp → server ID dechonet → Global → Copilot Global (~/.copilot/mcp-config.json). .vscode/mcp.json is deprecated. | | Gemini CLI | gemini mcp add --transport http dechonet https://dechonet.com/mcp (in settings.json use httpUrl, not url) | | Codex | codex mcp add dechonet --url https://dechonet.com/mcp | | Windsurf | ~/.codeium/windsurf/mcp_config.json: {"mcpServers":{"dechonet":{"serverUrl":"https://dechonet.com/mcp"}}} | | Any stdio-only client | npm package — see Quick Start below |

Step-by-step for each client: dechonet.com/mcp. The remote endpoint also serves 3 curated prompts (audit_domain, monitor_setup, investigate_changes) and 2 reference resources.

Quick Start (stdio, Claude Desktop)

Add to your claude_desktop_config.json:

json

{
  "mcpServers": {
    "dechonet": {
      "command": "npx",
      "args": ["-y", "dechonet-mcp"]
    }
  }
}

Excerpt — the full document is on GitHub.

Alternatives to Dechonet MCP

Maintain Dechonet MCP? Add a badge to your README

Shows its health grade, and links readers to install steps for every client.

markdown

[![Dechonet MCP on MCP Skills Hub](https://mcp-skills-hub.vercel.app/badge/com-dechonet-mcp)](https://mcp-skills-hub.vercel.app/mcps/com-dechonet-mcp)

Catalog data refreshed Oct 28, 2026. Something wrong? Report it.