surface-mcp is an Apache-2.0-licensed stdio MCP server that unifies access to ARL, ScopeSentry, and XingRin attack surface management platforms. It is intended for security teams and developers integrating attack surface data into MCP-compatible tools and workflows.
In the Frameworks & runtimes space, surface-mcp takes a focused approach. It focuses on connecting multiple attack surface management platforms to developer and security workflows through a unified MCP server. It is built as an open-source project for security engineers and developers building MCP-enabled workflows. The project is open source (Apache-2.0). It ships for the command line and API, and it can be self-hosted.
RuoJi6 builds and maintains surface-mcp, and it first shipped in 2026. Development happens publicly on GitHub with 3 commits in the last 90 days. Key capabilities include MCP server, stdio transport, and ARL integration. It exposes integrations via an MCP server.
Summary written by a language model from the project’s public pages.
What PulseGate has recorded for this listing
Closest matches by what these projects do