lookup-disclose-io

io.github.disclose/lookup-disclose-ioVersion 2.0.1

Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).

Status

Responds410 msNov 14, 2026, 14:49 UTCAnswered our handshake without sign-in.

We could not refresh it, so this page shows the last copy.

Data from the official MCP Registry, checked by run.zero. How we check

Streamable HTTP

https://lookup.disclose.io/mcpResponds410 msNov 14, 2026, 14:49 UTC

No sign-in

claude mcp add --transport http lookup-disclose-io https://lookup.disclose.io/mcp

1
2
3

Settings > Connectors > Add custom connector
Name: lookup-disclose-io
Remote MCP server URL: https://lookup.disclose.io/mcp

{
  "mcpServers": {
    "lookup-disclose-io": {
      "url": "https://lookup.disclose.io/mcp"
    }
  }
}

code --add-mcp '{"name":"lookup-disclose-io","type":"http","url":"https://lookup.disclose.io/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

2 tools

Tools of lookup-disclose-io
	Description		Read-only	Idempotent	Open world
`classify_asset`Classify an input as a domain, IP, package, repository, etc. No network calls — instant response. Useful for understanding what an asset is before performing a full lookup.	Classify an input as a domain, IP, package, repository, etc. No network calls — instant response. Useful for understanding what an asset is before performing a full lookup.	Not declared	Yes	Not declared	No
`lookup_security_contact`Find security reporting channels for responsible vulnerability disclosure. Takes a domain, IP, URL, package name, repository, container image, mobile app, hardware device, browser extension, desktop app, or organization name. Returns bug bounty programs, security.txt contacts, VDP links, abuse contacts, and national/global CERT fallbacks ordered by applicability to the queried owner and asset. This is informational only — not legal advice.	Find security reporting channels for responsible vulnerability disclosure. Takes a domain, IP, URL, package name, repository, container image, mobile app, hardware device, browser extension, desktop app, or organization name. Returns bug bounty programs, security.txt contacts, VDP links, abuse contacts, and national/global CERT fallbacks ordered by applicability to the queried owner and asset. This is informational only — not legal advice.	Not declared	Yes	Not declared	Yes

Registry status: Active
Published: Jun 21, 2026
Updated: Jun 21, 2026
Website: https://lookup.disclose.io/⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): Developer toolsSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared