Model Context Protocol moderate risk

Zoomeye

ZoomEye MCP server provides network asset information via the ZoomEye search engine, enabling LLMs to query and retrieve data about internet-connected devices and websites.

Connections & Capabilities

Connects To

GitHubDocker

Capabilities

read

Quickstart

Install

pip install mcp-server-zoomeye

Exposed MCP Tools (1)

safe

zoomeye_search

Retrieves network asset information from ZoomEye based on a base64 encoded query string.

Read-only access to ZoomEye's search functionality; no direct system modifications.

Safety Assessment

The ZoomEye MCP server is relatively safe for read-only network asset information retrieval. However, the potential for misuse of the data and the risk of API key compromise necessitate careful handling and monitoring. It is safer when used with well-defined queries and appropriate access controls.

Read-only access to ZoomEye search data.
No direct write or delete operations on target systems.
Caching mechanism reduces API calls and potential abuse.
API key authentication provides some access control.

Exposure of network asset information could be used for malicious purposes.
Improperly constructed queries could lead to excessive API usage.
API key compromise could grant unauthorized access to ZoomEye data.
No built-in rate limiting beyond ZoomEye's API limits.