mcp-recon
About
Tellix is a conversational recon interface powered by httpx and LLMs. Just ask.
Details
- Author
- nickpending
- GitHub stars
- 28
- Downloads
- 302
- Categories
- Other, Security
Jump to
- Conversational commands via natural language prompts
- MCP server integration with Claude Desktop and compatible tools
- Multiple analysis modes: lite and full recon levels
- Standalone ASN lookup for IPs, ASNs, or organizations
- Docker‑ready for isolated, secure execution
- Built‑in bug workarounds for httpx stdin/stdout leaks
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
mcp-reconCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Clone the repository, build the Docker image, then add the container as an MCP server in your Claude Desktop configuration using the provided docker run command. Optionally, set a PDCP_API_KEY environment variable for ProjectDiscovery API access. Once configured, issue natural language queries such as “What’s the status code for example.com?” to trigger recon tools.
generate_ppt_by_topic
Generate PowerPoint presentations from topics
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"mcp-recon": {
"\u6b4c\u8005PPT": {
"command": "npx",
"args": [
"-y",
"gezhe-mcp-server@latest"
],
"env": {
"API_KEY": "\u66ff\u6362\u4e3a\u83b7\u53d6\u7684 API_KEY"
}
}
}
}
}
McpServers
{
"\u6b4c\u8005PPT": {
"command": "npx",
"args": [
"-y",
"gezhe-mcp-server@latest"
],
"env": {
"API_KEY": "\u66ff\u6362\u4e3a\u83b7\u53d6\u7684 API_KEY"
}
}
}
mcp-recon
> mcp-recon (formerly Tellix) is a conversational reconnaissance interface and MCP server powered by httpx and asnmap. Just ask.
Overview
mcp-recon bridges the gap between natural language and HTTP infrastructure analysis. It exposes reconnaissance tools through the Model Context Protocol (MCP), allowing you to perform web domain reconnaissance via any compatible AI interface, such as Claude Desktop.
Features
- Conversational Commands: Execute reconnaissance through simple text prompts
- MCP Server: Integrates with Claude Desktop or other MCP-compatible tools
- Multiple Analysis Modes: Choose from lite and full reconnaissance levels
- Standalone ASN Lookup: Query IPs, ASNs, or organizations directly
- Docker Ready: Run in an isolated container for security and portability
- Powered by httpx: Utilizes ProjectDiscovery's robust reconnaissance tools
- Bug Workarounds: Automatically handles httpx's stdin/stdout leakage issue
- MCP Prompts: Includes predefined prompts like http_lite_scan and katana_command_generator for streamlined operations
What is the Model Context Protocol (MCP)?
The Model Context Protocol (MCP) is an open standard developed by Anthropic that enables AI assistants to interact with external tools, systems, and data sources. MCP provides a standardized interface for AI models to access and execute functions, retrieve resources, and utilize prompts, facilitating seamless integration between AI applications and various software environments.
MCP Prompts in mcp-recon
In MCP, a prompt is a predefined template that guides AI assistants in performing specific tasks. Prompts can accept dynamic arguments, include context from resources, and chain multiple interactions, enabling structured and efficient workflows.
mcp-recon includes the following prompts:
- http_lite_scan: Initiates a quick HTTP scan for basic information about specified targets.
- katana_command_generator: Generates optimized Katana crawl commands based on reconnaissance goals and desired thoroughness.
Quick Start Guide
mcp-recon provides three main reconnaissance tools:
1. Quick/Lightweight Reconnaissance (http_lite_recon)
Fast, lightweight HTTP fingerprinting that provides essential information with minimal overhead.
Example:
User: "Using quick http recon, what's the status code for example.com?"
AI: "I checked example.com and it's currently returning a 200 OK status code, indicating the site is up and functioning normally. It's being served from an Nginx web server on IP 93.184.216.34."
2. Full Reconnaissance (http_full_recon)
Comprehensive metadata collection including page previews, headers, certificates, and technology detection.
Example:
User: "Using full http recon, what certificates is www.google.com using?"
AI: "Based on my analysis, www.google.com is using a TLS 1.3 certificate issued by Google Trust Services. The certificate was issued on March 20, 2025, and is valid until June 12, 2025. It was specifically issued for 'www.google.com' and uses the TLS_AES_128_GCM_SHA256 cipher suite."
3. ASN Lookup (asn_lookup)
Standalone lookup of IPs, ASNs, or organization names using ProjectDiscovery's asnmap library.
Example:
User: "Who owns ASN 14421?"
AI: "ASN 14421 is operated by 'PPLINKNET' in the US."
Installation
```bash
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.



