asmhunter-mcp

ASMHunter is a continuous attack surface monitoring (ASM) platform designed specifically for bug bounty hunters and security professionals. The tool addresses the challenges of tracking internet-facing assets within bug bounty scopes, such as subdomains, ports, endpoints, and HTTP services, by providing real-time monitoring and attribution for every change detected. Unlike traditional ASM tools that simply report asset changes, ASMHunter links each finding to the specific scan, asset, and timestamp that surfaced it, enabling users to trace bounties directly back to the monitoring event that earned them.

The platform offers a chronological diff feed that highlights new subdomains, ports, HTTP fingerprints, URLs, and findings as they appear. Scheduled sweeps run automatically without requiring users to maintain their own infrastructure, cron jobs, or deduplication scripts. ASMHunter is scope-aware, ensuring all monitoring stays within authorized bug bounty programs. Users can receive alerts via Telegram and email, and findings are enriched with metadata for scan attribution. The tool also provides a public API, allowing integration with custom scripts, Caido, or AI agents, making it adaptable to various workflows.

ASMHunter features a native Model Context Protocol (MCP) server, enabling users to drive reconnaissance, hunt sessions, and reporting directly from AI clients such as Claude or Cursor. This integration allows for natural language interaction, letting users start sessions, set goals, log findings, and draft reports without leaving their editor or chat environment. The platform supports goal-driven hunting, keeping AI agents focused on specific objectives throughout a session.

Pricing is structured for individual hunters and teams, with a free tier offering weekly sweeps for up to three targets. Paid plans include Hunter, Pro, and Legend, which scale in sweep frequency and target count, and add features such as deeper discovery modules for XSS, SQLi, and JS secret extraction. Team and enterprise options are available for organizations needing shared dashboards, SSO, or custom workflows. ASMHunter is delivered as a managed service and does not require self-hosting or manual infrastructure maintenance.