Security & Testing
macrocyber.co
Runs passive external attack-surface assessments of public websites and returns a signed, exploitability-graded exposure claim with SSVC decisions, scores, and vulnerability taxonomy evidence.
ENDPOINT 1
https://macrocyber.co/api/mcp
MCP server metadata
- Name
- MacroCyber
- Version
- 1.0
Call the macrocyber_exposure_claim tool with a public URL to get a signed, exploitability-graded exposure claim. Passive and external; never asserts an exploit.
Known tools 1
macrocyber_exposure_claimRun a passive, external attack-surface assessment of a public website and return a signed, exploitability-graded exposure claim: an SSVC decision (Act, Attend, or Track), a folded score and letter grade, the observed enablers (each with its evidence, reachability, and CWE/OWASP/LLM/ASI taxonomy), and any composed attack-path chains.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.macrocyber]
url = "https://macrocyber.co/api/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"macrocyber": {
"type": "http",
"url": "https://macrocyber.co/api/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: macrocyber
Remote MCP URL: https://macrocyber.co/api/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"macrocyber": {
"url": "https://macrocyber.co/api/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"macrocyber": {
"type": "http",
"url": "https://macrocyber.co/api/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "macrocyber",
"transport": "streamable-http",
"url": "https://macrocyber.co/api/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Loading Trust v2 evidence…
Checking the associated registrable domain. The BuiltWith key remains server-side.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.