Discover mobile app attack surfaces via BeVigil OSINT — hosts, subdomains, URLs, and more.
registry version 1.1.0
npm
npx -y bevigil-mcp-servernpm
npx -y bevigil-mcp-server@1.1.0
Pick your client — the config below is generated for this server (local stdio). Copy respects the “Pin version” switch above.
claude_desktop_config.json
{
"mcpServers": {
"bevigil": {
"command": "npx",
"args": [
"-y",
"bevigil-mcp-server"
],
"env": {
"BEVIGIL_API_KEY": "<YOUR_BEVIGIL_API_KEY>"
}
}
}
}{
"mcpServers": {
"bevigil": {
"command": "npx",
"args": [
"-y",
"bevigil-mcp-server@1.1.0"
],
"env": {
"BEVIGIL_API_KEY": "<YOUR_BEVIGIL_API_KEY>"
}
}
}
}Format verified against the official Claude Desktop docs ↗.
terminal
claude mcp add --env BEVIGIL_API_KEY=<YOUR_BEVIGIL_API_KEY> bevigil -- npx -y bevigil-mcp-server
claude mcp add --env BEVIGIL_API_KEY=<YOUR_BEVIGIL_API_KEY> bevigil -- npx -y bevigil-mcp-server@1.1.0
Format verified against the official Claude Code docs ↗.
.cursor/mcp.json
{
"mcpServers": {
"bevigil": {
"command": "npx",
"args": [
"-y",
"bevigil-mcp-server"
],
"env": {
"BEVIGIL_API_KEY": "<YOUR_BEVIGIL_API_KEY>"
}
}
}
}{
"mcpServers": {
"bevigil": {
"command": "npx",
"args": [
"-y",
"bevigil-mcp-server@1.1.0"
],
"env": {
"BEVIGIL_API_KEY": "<YOUR_BEVIGIL_API_KEY>"
}
}
}
}Format verified against the official Cursor docs ↗.
.vscode/mcp.json
{
"servers": {
"bevigil": {
"command": "npx",
"args": [
"-y",
"bevigil-mcp-server"
],
"env": {
"BEVIGIL_API_KEY": "<YOUR_BEVIGIL_API_KEY>"
}
}
}
}{
"servers": {
"bevigil": {
"command": "npx",
"args": [
"-y",
"bevigil-mcp-server@1.1.0"
],
"env": {
"BEVIGIL_API_KEY": "<YOUR_BEVIGIL_API_KEY>"
}
}
}
}Format verified against the official VS Code docs ↗.
mcp_config.json
{
"mcpServers": {
"bevigil": {
"command": "npx",
"args": [
"-y",
"bevigil-mcp-server"
],
"env": {
"BEVIGIL_API_KEY": "<YOUR_BEVIGIL_API_KEY>"
}
}
}
}{
"mcpServers": {
"bevigil": {
"command": "npx",
"args": [
"-y",
"bevigil-mcp-server@1.1.0"
],
"env": {
"BEVIGIL_API_KEY": "<YOUR_BEVIGIL_API_KEY>"
}
}
}
}Format verified against the official Windsurf docs ↗.
Defined in the server's official registry manifest. Required secrets are shown as <YOUR_…> placeholders in the configs above.
BEVIGIL_API_KEY required secret — BeVigil OSINT API key. Get one free at https://bevigil.com/osint-api⭐ 1 stars · 最近更新于 80 天前 · MIT license
BeVigil MCP Server Map a company's mobile attack surface from your AI assistant. BeVigil has scanned millions of Android apps and extracted the infrastructure hiding inside them — backend hosts, staging subdomains, S3 buckets, API paths, and query parameters that never appear in DNS or search engine…
Summary from the project README — github.com/santhosh-005/bevigil-mcp-server
Distributed as npm, listed under Developer Tools. Review our MCP security guide before granting access to real data.
BeVigil MCP Server Map a company's mobile attack surface from your AI assistant. BeVigil has scanned millions of Android apps and extracted the infrastructure hiding inside them — backend hosts, staging subdomains, S3 buckets, API paths, and query parameters that never appear in DNS or search engine
Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.
The MCP server itself is free to install. The source is public on https://github.com/santhosh-005/bevigil-mcp-server. Any third-party service it calls may require its own API key and account.
Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.
Publish this server? Link back with a badge on your README or site — copy either snippet.
Markdown
[](https://mcpnav.net/server/bevigil/)
HTML
<a href="https://mcpnav.net/server/bevigil/"><img src="https://mcpnav.net/badge/bevigil.svg" alt="Listed on MCPNav" height="20"></a>