Manual setup required. The maintainer's config contains paths only you know - edit the placeholders below before adding it to Claude Code.
1
Prepare the server locally
Run this once before adding it to Claude Code.
git clone https://github.com/intelligent-ears/pd-tools-mcp
cd pd-tools-mcp
npm install
npm run build2
Register it in Claude Code
claude mcp add projectdiscovery-mcp -- node /absolute/path/to/pdmcp/build/index.jsReplace any placeholder paths in the command with the real path on your machine.
3
Make your agent remember this setup
projectdiscovery-mcp's config, env vars, and the gotchas you hit — recalled in every future Claude Code, Cursor, and Codex session.
npx conare@latestFree · one command · indexes the sessions already on disk. Set up in the browser instead →
What it does
- Automated subdomain discovery using subfinder
- DNS resolution and probing with dnsx
- Fast port scanning via naabu
- HTTP/HTTPS probing and analysis with httpx
- Vulnerability scanning using nuclei with YAML templates
Tools 1
subfinderDiscover subdomains for a target domain using passive sources.Try it
→Use subfinder to discover all subdomains for example.com.
→Perform a full bug hunting reconnaissance workflow on target domain example.com.
→Run a vulnerability scan on example.com using nuclei.
Original README from intelligent-ears/pd-tools-mcp
ProjectDiscovery MCP Server
A Model Context Protocol (MCP) server that integrates ProjectDiscovery security tools for automated bug bounty reconnaissance and vulnerability scanning.
Features
This MCP server provides comprehensive security reconnaissance capabilities:
Individual Tools
- subfinder - Subdomain discovery using passive sources
- dnsx - DNS resolution and probing
- naabu - Fast port scanning
- httpx - HTTP/HTTPS probing and analysis
- katana - Web crawling and endpoint discovery
- nuclei - Vulnerability scanning with YAML templates
Automated Workflow
- Bug Hunting workflow - End-to-end reconnaissance pipeline that chains all tools together
Workflow Diagram
Target Domain
│
▼
┌─────────────────────────────────────────────┐
│ Step 1: Subdomain Discovery (subfinder) │
│ Find all subdomains via passive sources │
└──────────────────┬──────────────────────────┘
│
▼
┌─────────────────────────────────────────────┐
│ Step 2: DNS Resolution (dnsx) │
│ Resolve domains to IP addresses │
└──────────────────┬──────────────────────────┘
│
▼
┌─────────────────────────────────────────────┐
│ Step 3: Port Scanning (naabu) [OPTIONAL] │
│ Scan top ports on resolved hosts │
└──────────────────┬──────────────────────────┘
│
▼
┌─────────────────────────────────────────────┐
│ Step 4: HTTP Probing (httpx) │
│ Identify live web services │
└──────────────────┬──────────────────────────┘
│
▼
┌─────────────────────────────────────────────┐
│ Step 5: Web Crawling (katana) [OPTIONAL] │
│ Discover endpoints & paths │
└──────────────────┬──────────────────────────┘
│
▼
┌─────────────────────────────────────────────┐
│ Step 6: Vulnerability Scan (nuclei) │
│ Test for known vulnerabilities │
└──────────────────┬──────────────────────────┘
│
▼
Comprehensive Report
├─ Attack surface mapping
├─ Open ports & services
├─ Live web applications
├─ Discovered endpoints
└─ Security vulnerabilities
Execution Time: ~2 minutes (varies by target size)
Output: JSON report with:
- Total subdomains, resolved hosts, open ports
- Live HTTP services with status codes and titles
- Crawled endpoints and paths
- Vulnerabilities categorized by severity (critical/high/medium/low)
Prerequisites
Before using this MCP server, you must install the ProjectDiscovery tools:
# Install Go (required)
# On Ubuntu/Debian
sudo apt update
sudo apt install golang-go
# On macOS
brew install go
# Install ProjectDiscovery tools
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
go install -v github.com/projectdiscovery/dnsx/cmd/dnsx@latest
go install -v github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
go install -v github.com/projectdiscovery/katana/cmd/katana@latest
go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest
# Update Nuclei templates
nuclei -update-templates
# Ensure tools are in PATH
export PATH=$PATH:$(go env GOPATH)/bin
Installation
# Clone the repository
git clone https://github.com/intelligent-ears/pd-tools-mcp
cd pd-tools-mcp
# Install dependencies
npm install
# Build the server
npm run build
Usage
With Claude Desktop
Add to your Claude Desktop configuration (claude_desktop_config.json):
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"projectdiscovery": {
"command": "node",
"args": ["/absolute/path/to/pdmcp/build/index.js"]
}
}
}
With VS Code
Create or update .vscode/mcp.json in your workspace:
{
"projectdiscovery": {
"type": "stdio",
"command": "node",
"args": ["/absolute/path/to/pdmcp/build/index.js"]
}
}
Standalone Testing
npm start
Available Tools
1. subfinder
Discover subdomains for a target domain.
Input:
domain(string, required): Target domain (e.g., "example.com")silent(boolean, optional): Show only subdomains in output
Example:
{
"domain": "example.c