detectzestack-mcp

Name: detectzestack-mcp
Author: mlugo-apx

Local

github.com/mlugo-apxSecurity0Updated 5w ago

Repository

About detectzestack-mcp

detectzestack-mcp is an MCP server for AI agents assessing a website's technologies and security details. It combines stack detection with checks for headers, SSL/TLS, DNS, and known vulnerabilities.

Key features

01Detect site technologies and check for a specific technology
02Find domains that use a technology
03Grade security headers
04Inspect SSL/TLS certificates and DNS records
05Scan for CVE/CPE vulnerabilities
06Compare technology stacks across sites

Use cases

01Identify the technologies behind a website
02Check a site's security headers and certificate
03Review DNS and email security records
04Scan a website for known vulnerabilities

MCP support

It exposes website technology detection, security header, SSL/TLS, DNS, vulnerability scan, stack comparison, and site profile tools to MCP clients.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config

{
  "mcpServers": {
    "mlugo-apx-detectzestack": {
      "command": "npx",
      "args": [
        "-y",
        "detectzestack-mcp"
      ],
      "env": {
        "DETECTZESTACK_API_KEY": "<DETECTZESTACK_API_KEY>",
        "RAPIDAPI_KEY": "<RAPIDAPI_KEY>",
        "APIMARKET_KEY": "<APIMARKET_KEY>"
      }
    }
  }
}

Run commandnpx -y detectzestack-mcp

Environment variables to set

DETECTZESTACK_API_KEYSecretDirect API key from https://detectzestack.com/signup (free: 100 requests/month). Set this OR one of the others.

RAPIDAPI_KEYSecretRapidAPI key from https://rapidapi.com/mlugoapx/api/detectzestack (alternative).

APIMARKET_KEYSecretAPI.market key (alternative).

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages

npmdetectzestack-mcp1.1.1stdio

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

DetectZeStack MCP Server

An MCP (Model Context Protocol) server that lets AI agents detect technology stacks, analyze security headers, inspect SSL certificates, look up DNS records, and scan for vulnerabilities on any website.

Quick Start

Claude Code

Add to .mcp.json in your project root (or ~/.claude/.mcp.json for global):

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}

Get Your API Key

Either:

Direct: sign up at detectzestack.com/signup (free tier: 100 requests/month) and set DETECTZESTACK_API_KEY, or
RapidAPI: subscribe at DetectZeStack on RapidAPI and set RAPIDAPI_KEY.

Alternative API Providers

Instead of RapidAPI, you can use API.market or a direct API key:

API.market:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "APIMARKET_KEY": "your-apimarket-key"
      }
    }
  }
}

Direct API Key:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "DETECTZESTACK_API_KEY": "your-api-key"
      }
    }
  }
}

Provider priority: RAPIDAPI_KEY > APIMARKET_KEY > DETECTZESTACK_API_KEY

Available Tools

Tool	Description	Credits
`detect_tech_stack`	Detect all technologies on a website	1
`check_technology`	Check if a site uses a specific technology	1
`lookup_by_technology`	Find domains using a specific technology	1
`check_security_headers`	Grade security headers (A+ to F)	1
`check_ssl_certificate`	Inspect SSL/TLS certificate details	1
`dns_lookup`	DNS records + email security (SPF/DMARC/DKIM)	1
`scan_vulnerabilities`	CVE/CPE vulnerability scan	1
`compare_stacks`	Compare tech stacks of 2-10 sites	1 per URL
`site_profile`	Full combined profile (Ultra+ plan)	3

Example Prompts

Once configured, ask your AI agent:

"What technologies does stripe.com use?"
"Does shopify.com use React?"
"Check the security headers of my-site.com"
"Is the SSL certificate for example.com about to expire?"
"Look up DNS records for gmail.com"
"Scan my-app.com for known vulnerabilities"
"Compare the tech stacks of stripe.com and square.com"
"Give me a full site profile of github.com"

Pricing

Plan	Requests/Month	Price
Basic	100	Free
Pro	1,000	$9/mo
Ultra	10,000	$29/mo
Mega	50,000	$79/mo

View pricing (same plans on RapidAPI)

License

MIT

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

Read the getting-started guide

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.