io.github.mlugo-apx/detectzestack-mcp
Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
detectzestack-mcpclaude mcp add detectzestack-mcp -e 'DETECTZESTACK_API_KEY=<your detectzestack_api_key>' -e 'RAPIDAPI_KEY=<your rapidapi_key>' -e 'APIMARKET_KEY=<your apimarket_key>' -- npx -y detectzestack-mcp@1.1.1
{
"mcpServers": {
"detectzestack-mcp": {
"command": "npx",
"args": [
"-y",
"detectzestack-mcp@1.1.1"
],
"env": {
"DETECTZESTACK_API_KEY": "<your detectzestack_api_key>",
"RAPIDAPI_KEY": "<your rapidapi_key>",
"APIMARKET_KEY": "<your apimarket_key>"
}
}
}
}
Environment variables
DETECTZESTACK_API_KEYsecret Direct API key from https://detectzestack.com/signup (free: 100 requests/month). Set this OR one of the others.RAPIDAPI_KEYsecret RapidAPI key from https://rapidapi.com/mlugoapx/api/detectzestack (alternative).APIMARKET_KEYsecret API.market key (alternative).
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
DetectZeStack MCP Server
An MCP (Model Context Protocol) server that lets AI agents detect technology stacks, analyze security headers, inspect SSL certificates, look up DNS records, and scan for vulnerabilities on any website.
Quick Start
Claude Code
Add to .mcp.json in your project root (or ~/.claude/.mcp.json for global):
{
"mcpServers": {
"detectzestack": {
"command": "npx",
"args": ["-y", "detectzestack-mcp"],
"env": {
"RAPIDAPI_KEY": "your-rapidapi-key"
}
}
}
}
Cursor
Add to .cursor/mcp.json in your project:
{
"mcpServers": {
"detectzestack": {
"command": "npx",
"args": ["-y", "detectzestack-mcp"],
"env": {
"RAPIDAPI_KEY": "your-rapidapi-key"
}
}
}
}
Windsurf
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"detectzestack": {
"command": "npx",
"args": ["-y", "detectzestack-mcp"],
"env": {
"RAPIDAPI_KEY": "your-rapidapi-key"
}
}
}
}
Get Your API Key
Either:
- Direct: sign up at detectzestack.com/signup (free tier: 100 requests/month) and set
DETECTZESTACK_API_KEY, or - RapidAPI: subscribe at DetectZeStack on RapidAPI and set
RAPIDAPI_KEY.
Alternative API Providers
Instead of RapidAPI, you can use API.market or a direct API key:
API.market:
{
"mcpServers": {
"detectzestack": {
"command": "npx",
"args": ["-y", "detectzestack-mcp"],
"env": {
"APIMARKET_KEY": "your-apimarket-key"
}
}
}
}
Direct API Key:
{
"mcpServers": {
"detectzestack": {
"command": "npx",
"args": ["-y", "detectzestack-mcp"],
"env": {
"DETECTZESTACK_API_KEY": "your-api-key"
}
}
}
}
Provider priority: RAPIDAPI_KEY > APIMARKET_KEY > DETECTZESTACK_API_KEY
Available Tools
| Tool | Description | Credits |
|---|---|---|
detect_tech_stack | Detect all technologies on a website | 1 |
check_technology | Check if a site uses a specific technology | 1 |
lookup_by_technology | Find domains using a specific technology | 1 |
check_security_headers | Grade security headers (A+ to F) | 1 |
check_ssl_certificate | Inspect SSL/TLS certificate details | 1 |
dns_lookup | DNS records + email security (SPF/DMARC/DKIM) | 1 |
scan_vulnerabilities | CVE/CPE vulnerability scan | 1 |
compare_stacks | Compare tech stacks of 2-10 sites | 1 per URL |
site_profile | Full combined profile (Ultra+ plan) | 3 |
Example Prompts
Once configured, ask your AI agent:
- "What technologies does stripe.com use?"
- "Does shopify.com use React?"
- "Check the security headers of my-site.com"
- "Is the SSL certificate for example.com about to expire?"
- "Look up DNS records for gmail.com"
- "Scan my-app.com for known vulnerabilities"
- "Compare the tech stacks of stripe.com and square.com"
- "Give me a full site profile of github.com"
Pricing
| Plan | Requests/Month | Price |
|---|---|---|
| Basic | 100 | Free |
| Pro | 1,000 | $9/mo |
| Ultra | 10,000 | $29/mo |
| Mega | 50,000 | $79/mo |
View pricing (same plans on RapidAPI)
Links
License
MIT
Frequently asked questions
What is io.github.mlugo-apx/detectzestack-mcp?
Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.
How do I install io.github.mlugo-apx/detectzestack-mcp?
It runs on your machine. In Claude Code: claude mcp add detectzestack-mcp -e 'DETECTZESTACK_API_KEY=<your detectzestack_api_key>' -e 'RAPIDAPI_KEY=<your rapidapi_key>' -e 'APIMARKET_KEY=<your apimarket_key>' -- npx -y detectzestack-mcp@1.1.1. For other clients, paste the JSON configuration from this page into their MCP settings.
Does io.github.mlugo-apx/detectzestack-mcp need an API key?
Yes. It expects DETECTZESTACK_API_KEY, RAPIDAPI_KEY, APIMARKET_KEY, which you set in its configuration.
Is io.github.mlugo-apx/detectzestack-mcp open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains io.github.mlugo-apx/detectzestack-mcp?
It is published by mlugo-apx. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.