cloud_exposure_check

MCP tool from AynOps by AynOps

Checks for publicly accessible AWS S3, Azure Blob Storage, and Google Cloud Storage buckets using common bucket naming patterns derived from the target domain

How to use it

cloud_exposure_check is exposed by the AynOps MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the cloud_exposure_check tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install AynOps

$docker run --rm -i aynops

FULL AYNOPS LISTING

Other tools in AynOps (15)

asn_lookup

Autonomous System Number (ASN) and network ownership lookup via Team Cymru WHOIS — identifies ASN, BGP prefix, organization, registry, country, and allocation date for domains or IP addresses (no API key required)

cert_transparency

Query crt.sh Certificate Transparency logs for a domain and extract certificate, subdomain, and wildcard information

cve_lookup

Search NVD for known CVEs by software name and version (no API key required)

dns_enumeration

A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, and common SRV records (SIP, LDAP, XMPP, Kerberos, Autodiscover) + common subdomain brute-forcing

email_security_check

Checks SPF, DKIM, and DMARC DNS records — returns a securityscore, rating, and actionable recommendations for missing or weak configurations

full_recon

Runs all core tools in parallel and returns combined result

headers_analyzer

Analyzes HTTP security headers — checks HSTS, CSP, X-Frame-Options, and more with severity ratings and misconfiguration details

hibp_check

Check if an email or domain appears in Have I Been Pwned breaches (HIBPAPIKEY required)

ip_reputation

Check if an IP is flagged as malicious via AbuseIPDB (api key requied)

port_scan

Nmap-powered scanner with service/version detection and security warnings

robots_txt_inspect

Fetch and parse robots.txt to reveal hidden directories and sitemaps

ssl_inspect

SSL/TLS certificate — issuer, expiry, cipher strength, SANs, TLS version

tech_stack_detect

Web server, CMS, JS frameworks, CDN, and analytics

trace_redirects

Traces the full HTTP redirect chain hop by hop — flags TLS downgrades, private-IP leaks, redirect loops, cross-domain hops, and overly long chains

whois_lookup

Domain registration data — owner, registrar, creation date, expiry, name servers