io.github.mlugo-apx/detectzestack-mcp

Official registry Search and web

Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package detectzestack-mcp
Claude Code
claude mcp add detectzestack-mcp -e 'DETECTZESTACK_API_KEY=<your detectzestack_api_key>' -e 'RAPIDAPI_KEY=<your rapidapi_key>' -e 'APIMARKET_KEY=<your apimarket_key>' -- npx -y detectzestack-mcp@1.1.1
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "detectzestack-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "detectzestack-mcp@1.1.1"
            ],
            "env": {
                "DETECTZESTACK_API_KEY": "<your detectzestack_api_key>",
                "RAPIDAPI_KEY": "<your rapidapi_key>",
                "APIMARKET_KEY": "<your apimarket_key>"
            }
        }
    }
}

Environment variables

  • DETECTZESTACK_API_KEY secret Direct API key from https://detectzestack.com/signup (free: 100 requests/month). Set this OR one of the others.
  • RAPIDAPI_KEY secret RapidAPI key from https://rapidapi.com/mlugoapx/api/detectzestack (alternative).
  • APIMARKET_KEY secret API.market key (alternative).

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. DetectZeStack MCP Server
  2. Quick Start
  3. Available Tools
  4. Example Prompts
  5. Pricing
  6. Links
  7. License

DetectZeStack MCP Server

An MCP (Model Context Protocol) server that lets AI agents detect technology stacks, analyze security headers, inspect SSL certificates, look up DNS records, and scan for vulnerabilities on any website.

Quick Start

Claude Code

Add to .mcp.json in your project root (or ~/.claude/.mcp.json for global):

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}
Cursor

Add to .cursor/mcp.json in your project:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}
Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "RAPIDAPI_KEY": "your-rapidapi-key"
      }
    }
  }
}
Get Your API Key

Either:

Alternative API Providers

Instead of RapidAPI, you can use API.market or a direct API key:

API.market:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "APIMARKET_KEY": "your-apimarket-key"
      }
    }
  }
}

Direct API Key:

{
  "mcpServers": {
    "detectzestack": {
      "command": "npx",
      "args": ["-y", "detectzestack-mcp"],
      "env": {
        "DETECTZESTACK_API_KEY": "your-api-key"
      }
    }
  }
}

Provider priority: RAPIDAPI_KEY > APIMARKET_KEY > DETECTZESTACK_API_KEY

Available Tools

ToolDescriptionCredits
detect_tech_stackDetect all technologies on a website1
check_technologyCheck if a site uses a specific technology1
lookup_by_technologyFind domains using a specific technology1
check_security_headersGrade security headers (A+ to F)1
check_ssl_certificateInspect SSL/TLS certificate details1
dns_lookupDNS records + email security (SPF/DMARC/DKIM)1
scan_vulnerabilitiesCVE/CPE vulnerability scan1
compare_stacksCompare tech stacks of 2-10 sites1 per URL
site_profileFull combined profile (Ultra+ plan)3

Example Prompts

Once configured, ask your AI agent:

  • "What technologies does stripe.com use?"
  • "Does shopify.com use React?"
  • "Check the security headers of my-site.com"
  • "Is the SSL certificate for example.com about to expire?"
  • "Look up DNS records for gmail.com"
  • "Scan my-app.com for known vulnerabilities"
  • "Compare the tech stacks of stripe.com and square.com"
  • "Give me a full site profile of github.com"

Pricing

PlanRequests/MonthPrice
Basic100Free
Pro1,000$9/mo
Ultra10,000$29/mo
Mega50,000$79/mo

View pricing (same plans on RapidAPI)

License

MIT

Frequently asked questions

What is io.github.mlugo-apx/detectzestack-mcp?

Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

How do I install io.github.mlugo-apx/detectzestack-mcp?

It runs on your machine. In Claude Code: claude mcp add detectzestack-mcp -e 'DETECTZESTACK_API_KEY=<your detectzestack_api_key>' -e 'RAPIDAPI_KEY=<your rapidapi_key>' -e 'APIMARKET_KEY=<your apimarket_key>' -- npx -y detectzestack-mcp@1.1.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.mlugo-apx/detectzestack-mcp need an API key?

Yes. It expects DETECTZESTACK_API_KEY, RAPIDAPI_KEY, APIMARKET_KEY, which you set in its configuration.

Is io.github.mlugo-apx/detectzestack-mcp open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.mlugo-apx/detectzestack-mcp?

It is published by mlugo-apx. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.