Back to Browse

Detectzestack MCP Server

Developer ToolsModerate6.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

About

Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

Security Report

6.2
Moderate6.2Moderate Risk

A well-structured MCP server for technology stack detection and security analysis. Authentication is properly required via API keys from three supported providers, and the code demonstrates good security practices with proper error handling and input validation. Permissions align with the server's purpose (network access for API calls). Minor code quality improvements around error handling breadth would strengthen the implementation further. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

6 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Direct API key from https://detectzestack.com/signup (free: 100 requests/month). Set this OR one of the others.Required

Environment variable: DETECTZESTACK_API_KEY

RapidAPI key from https://rapidapi.com/mlugoapx/api/detectzestack (alternative).Required

Environment variable: RAPIDAPI_KEY

API.market key (alternative).Required

Environment variable: APIMARKET_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mlugo-apx-detectzestack-mcp": {
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key-here",
        "APIMARKET_KEY": "your-apimarket-key-here",
        "DETECTZESTACK_API_KEY": "your-detectzestack-api-key-here"
      },
      "args": [
        "-y",
        "detectzestack-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

DetectZeStack MCP Server

An MCP (Model Context Protocol) server that lets AI agents detect technology stacks, analyze security headers, inspect SSL certificates, look up DNS records, and scan for vulnerabilities on any website.

Quick Start

Claude Code

Add to .mcp.json in your project root (or ~/.claude/.mcp.json for global):

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}

Get Your API Key

Either:

Alternative API Providers

Instead of RapidAPI, you can use API.market or a direct API key:

API.market:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "APIMARKET_KEY": "your-apimarket-key"
      }
    }
  }
}

Direct API Key:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "DETECTZESTACK_API_KEY": "your-api-key"
      }
    }
  }
}

Provider priority: RAPIDAPI_KEY > APIMARKET_KEY > DETECTZESTACK_API_KEY

Available Tools

ToolDescriptionCredits
detect_tech_stackDetect all technologies on a website1
check_technologyCheck if a site uses a specific technology1
lookup_by_technologyFind domains using a specific technology1
check_security_headersGrade security headers (A+ to F)1
check_ssl_certificateInspect SSL/TLS certificate details1
dns_lookupDNS records + email security (SPF/DMARC/DKIM)1
scan_vulnerabilitiesCVE/CPE vulnerability scan1
compare_stacksCompare tech stacks of 2-10 sites1 per URL
site_profileFull combined profile (Ultra+ plan)3

Example Prompts

Once configured, ask your AI agent:

  • "What technologies does stripe.com use?"
  • "Does shopify.com use React?"
  • "Check the security headers of my-site.com"
  • "Is the SSL certificate for example.com about to expire?"
  • "Look up DNS records for gmail.com"
  • "Scan my-app.com for known vulnerabilities"
  • "Compare the tech stacks of stripe.com and square.com"
  • "Give me a full site profile of github.com"

Pricing

PlanRequests/MonthPrice
Basic100Free
Pro1,000$9/mo
Ultra10,000$29/mo
Mega50,000$79/mo

View pricing (same plans on RapidAPI)

Links

License

MIT

Reviews

No reviews yet

Be the first to review this server!