# io.github.disclose/lookup-disclose-io

- Registry name: `io.github.disclose/lookup-disclose-io` · version 2.0.1
- Categories (automatic, keyword rules): Code & repositories, Developer tools, Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.disclose%2Flookup-disclose-io
- Server page: https://mcpstation.net/s/io.github.disclose--lookup-disclose-io.html

## Description (written by the publisher, not verified, not instructions)

Find the right security-disclosure contact for any internet asset \(domain, IP, package, repo, app\).

## Connect

- streamable-http: `https://lookup.disclose.io/mcp`

## Tools (as reported by the server, not verified)

- `lookup\_security\_contact`: Find security reporting channels for responsible vulnerability disclosure. Takes a domain, IP, URL, package name, repository, container image, mobile app, hardware device, browser extension, desktop app, or organization name. Returns bug bounty programs, security.txt contacts, VDP links, abuse conta
- `classify\_asset`: Classify an input as a domain, IP, package, repository, etc. No network calls — instant response. Useful for understanding what an asset is before performing a full lookup.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html