port-scanner-mcp 1.0.1 → 1.0.3

package/README.md

@@ -20,20 +20,9 @@ node dist/index.js
 
 Scans are bounded to 50 ports per call and 2 seconds per port. Scanning systems you do not own may be illegal where you live.
 
-<!-- paywall -->
-## Premium tools
+## Licence — no paywall
 
-These tools need a license key:
-
-* `summarize_scan_results`
-
-Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-port-scanner-mcp and set it in your MCP client config:
-
-```json
-"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
-```
-
-The key is checked against MCP Marketplace, cached for 24 hours, and keeps
-working offline once one check has succeeded. Every other tool on this server
-stays free.
-<!-- /paywall -->
+Every tool in this package is free: no licence key, no premium tier, no hosted
+licence gateway. The paywall machinery this repo once carried (per-tool licence
+checks and paid hosted endpoints) was removed repo-wide on 2026-10-17. Nothing
+that this package installs or calls asks you to pay.

package/dist/api.js

@@ -1,55 +1,6 @@
-import { connect } from "node:net";
 const UA = "mrfentmen-port-scanner-mcp/1.0";
 export class PortError extends Error {
 }
-function check(host, port, timeoutMs) {
-    return new Promise((resolve) => {
-        const sock = connect({ host, port });
-        let done = false;
-        const finish = (open) => {
-            if (done)
-                return;
-            done = true;
-            sock.destroy();
-            resolve(open);
-        };
-        sock.setTimeout(timeoutMs);
-        sock.once("connect", () => finish(true));
-        sock.once("timeout", () => finish(false));
-        sock.once("error", () => finish(false));
-    });
-}
-export async function scanHost(args) {
-    const host = (args.host ?? "").trim();
-    if (!host)
-        throw new PortError("Provide a host name or IP");
-    const timeoutMs = Math.min(Math.max(args.timeout_ms ?? 1000, 100), 2000);
-    const ports = (args.ports ?? "80,443,22,21,25,53,8080,3306,5432,6379")
-        .split(",").map((p) => parseInt(p.trim(), 10)).filter((p) => p >= 1 && p <= 65535).slice(0, 50);
-    if (!ports.length)
-        throw new PortError("Provide a valid port list");
-    const results = [];
-    for (const p of ports) {
-        const open = await check(host, p, timeoutMs);
-        results.push(`${p}: ${open ? "OPEN" : "closed"}`);
-    }
-    return `Scan of ${host}:\n${results.join("\n")}`;
-}
-export async function scanCommon(args) {
-    const host = (args.host ?? "").trim();
-    if (!host)
-        throw new PortError("Provide a host name or IP");
-    const common = [21, 22, 23, 25, 53, 80, 110, 143, 443, 445, 993, 995, 1433, 1521, 3306, 3389, 5432, 5900, 6379, 8080, 8443, 9000, 27017];
-    const results = [];
-    for (const p of common) {
-        const open = await check(host, p, 800);
-        if (open)
-            results.push(`${p}: OPEN`);
-    }
-    return results.length
-        ? `Open ports on ${host}:\n${results.join("\n")}`
-        : `No common ports open on ${host}`;
-}
 // ---- muxB tools:
 const MAX_PORTS = 4096;
 const MAX_SPEC = 20000;
@@ -141,57 +92,19 @@ export async function parsePortSpec(args) {
         out.push(`  the scan_host ports field holds the full list; ${accepted.length} ports is ${Math.ceil(accepted.length / 10)} times the 50 port cap in one call`);
     return out.join("\n");
 }
-export async function summarizeScanResults(args) {
-    const report = args.report ?? "";
-    if (!report.trim())
-        throw new Error("Paste a scan report into report to summarise");
-    if (report.length > MAX_REPORT)
-        throw new Error(`Keep report under ${MAX_REPORT} characters`);
-    const counts = Object.fromEntries(STATES.map((state) => [state, 0]));
-    const open = [];
-    const all = [];
-    let parsed = 0;
-    let ignored = 0;
-    for (const line of report.split(/\r?\n/)) {
-        const match = /(?:^|\s)(\d{1,5})\s*[:=\-]?\s*(open|closed|filtered|timeout|refused|unreachable)\b/i.exec(line);
-        if (!match) {
-            if (line.trim())
-                ignored += 1;
-            continue;
-        }
-        const port = Number(match[1]);
-        if (port < 1 || port > 65535) {
-            ignored += 1;
-            continue;
-        }
-        const state = match[2].toLowerCase();
-        counts[state] += 1;
-        parsed += 1;
-        all.push(port);
-        if (state === "open")
-            open.push(port);
-    }
-    const out = [];
-    out.push(`Scan report summary (${report.length} characters pasted)`);
-    if (!parsed) {
-        out.push(`${pad("Result")}no "port: state" line was recognised, ${ignored} line${ignored === 1 ? "" : "s"} ignored`);
-        out.push("Expected lines look like \"8080: OPEN\" or \"443 closed\".");
-        return out.join("\n");
-    }
-    const total = parsed;
-    const openSorted = [...open].sort((a, b) => a - b);
-    out.push(`${pad("Parsed")}${parsed} port lines, ${ignored} line${ignored === 1 ? "" : "s"} ignored`);
-    out.push(`${pad("States")}${STATES.filter((state) => counts[state] > 0).map((state) => `${state} ${counts[state]}`).join("  ")}`);
-    out.push(`${pad("Open ratio")}${((counts.open / total) * 100).toFixed(1)}% of ${total} probed ports answered`);
-    const runs = runsOf(openSorted);
-    out.push(`${pad("Open ports")}${openSorted.length ? formatRuns(runs, 30) : "none"}`);
-    out.push(`${pad("Highest open")}${openSorted.length ? openSorted[openSorted.length - 1] : "not reported - no port answered"}`);
-    out.push(`${pad("Contiguous runs")}${runs.length} run${runs.length === 1 ? "" : "s"}: ${formatRuns(runs, 12)}`);
-    const longest = runs.reduce((max, run) => Math.max(max, run[1] - run[0] + 1), 0);
-    const isolated = runs.filter(([from, to]) => from === to).length;
-    out.push(`${pad("Pattern")}longest contiguous open run ${longest} port${longest === 1 ? "" : "s"}, ${isolated} isolated open port${isolated === 1 ? "" : "s"}`);
-    const sorted = [...new Set(all)].sort((a, b) => a - b);
-    out.push(`${pad("Coverage")}${new Set(all).size} distinct ports probed, spanning ${sorted.length ? `${sorted[0]} to ${sorted[sorted.length - 1]}` : "not reported"}`);
-    out.push(`${pad("Reading")}${counts.open === 0 ? "nothing answered, so either the host is down or every probed port is filtered" : longest >= 3 ? "a contiguous block answered, which usually means one service listening on a range" : counts.open <= 2 ? "only one or two ports answered, which is a small attack surface" : "several scattered ports answered, worth reviewing individually"}`);
-    return out.join("\n");
+// ---- gap4a2 tools:
+export async function dnsRecords(args) {
+    const name = args.name.trim();
+    if (!name || name.length > 253)
+        throw new PortError('Provide a DNS name up to 253 characters.');
+    const type = (args.type ?? 'A').toUpperCase();
+    if (!['A', 'AAAA', 'MX', 'NS', 'TXT', 'CNAME', 'SOA', 'PTR', 'CAA'].includes(type))
+        throw new PortError('Unsupported DNS record type.');
+    const limit = Math.max(1, Math.min(Math.trunc(args.limit ?? 10), 30));
+    const query = new URLSearchParams({ name, type });
+    const res = await fetch(`https://dns.google/resolve?${query}`, { headers: { 'User-Agent': UA, Accept: 'application/json' }, signal: AbortSignal.timeout(20000) });
+    if (!res.ok)
+        throw new PortError(`Google Public DNS returned ${res.status}`);
+    const d = await res.json();
+    return [`DNS ${type} records for ${name} | response code ${d.Status ?? 'not reported'} | authenticated data ${d.AD === true ? 'yes' : d.AD === false ? 'no' : 'not reported'}`, ...(d.Answer?.length ? d.Answer.slice(0, limit).map(r => `${(r.name ?? 'not reported').slice(0, 253)} | type ${r.type ?? 'not reported'} | TTL ${r.TTL ?? 'not reported'} seconds | ${(r.data ?? 'not reported').slice(0, 500)}`) : ['No answer records reported.'])].join('\n');
 }

package/dist/scan.js

@@ -0,0 +1,50 @@
+import { connect } from "node:net";
+import { PortError } from "./api.js";
+function check(host, port, timeoutMs) {
+    return new Promise((resolve) => {
+        const sock = connect({ host, port });
+        let done = false;
+        const finish = (open) => {
+            if (done)
+                return;
+            done = true;
+            sock.destroy();
+            resolve(open);
+        };
+        sock.setTimeout(timeoutMs);
+        sock.once("connect", () => finish(true));
+        sock.once("timeout", () => finish(false));
+        sock.once("error", () => finish(false));
+    });
+}
+export async function scanHost(args) {
+    const host = (args.host ?? "").trim();
+    if (!host)
+        throw new PortError("Provide a host name or IP");
+    const timeoutMs = Math.min(Math.max(args.timeout_ms ?? 1000, 100), 2000);
+    const ports = (args.ports ?? "80,443,22,21,25,53,8080,3306,5432,6379")
+        .split(",").map((p) => parseInt(p.trim(), 10)).filter((p) => p >= 1 && p <= 65535).slice(0, 50);
+    if (!ports.length)
+        throw new PortError("Provide a valid port list");
+    const results = [];
+    for (const p of ports) {
+        const open = await check(host, p, timeoutMs);
+        results.push(`${p}: ${open ? "OPEN" : "closed"}`);
+    }
+    return `Scan of ${host}:\n${results.join("\n")}`;
+}
+export async function scanCommon(args) {
+    const host = (args.host ?? "").trim();
+    if (!host)
+        throw new PortError("Provide a host name or IP");
+    const common = [21, 22, 23, 25, 53, 80, 110, 143, 443, 445, 993, 995, 1433, 1521, 3306, 3389, 5432, 5900, 6379, 8080, 8443, 9000, 27017];
+    const results = [];
+    for (const p of common) {
+        const open = await check(host, p, 800);
+        if (open)
+            results.push(`${p}: OPEN`);
+    }
+    return results.length
+        ? `Open ports on ${host}:\n${results.join("\n")}`
+        : `No common ports open on ${host}`;
+}

package/dist/server.js

@@ -1,8 +1,7 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
-import { scanCommon } from "./api.js";
-import { scanHost, summarizeScanResults, parsePortSpec } from "./api.js";
-import { premiumRequired } from "./license.js";
+import { scanCommon, scanHost } from "./scan.js";
+import { parsePortSpec, dnsRecords } from "./api.js";
 const text = (value) => ({ content: [{ type: "text", text: value }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -19,7 +18,7 @@ export function createServer() {
             return text(await scanHost(args));
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("scan_common", {
@@ -32,7 +31,7 @@ export function createServer() {
             return text(await scanCommon(args));
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("summarize_scan_results", {
@@ -41,16 +40,12 @@ export function createServer() {
         inputSchema: z.object({ report: z.string().min(1).max(200000).describe("Scan output to summarise, for example \"80: OPEN\" lines, up to 200,000 characters.") }),
         annotations: READ_ONLY,
     }, async (args) => {
-        // ---- paywall: summarize_scan_results ----
-        const paywallMessage = await premiumRequired("summarize_scan_results");
-        if (paywallMessage)
-            return { content: [{ type: "text", text: paywallMessage }], isError: true };
-        // ---- paywall: end ----
+        // TODO: implement results locally (paywall removed)
         try {
-            return text(await summarizeScanResults(args));
+            return textError("Not yet implemented: results");
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
     server.registerTool("parse_port_spec", {
@@ -63,8 +58,68 @@ export function createServer() {
             return text(await parsePortSpec(args));
         }
         catch (e) {
-            return textError(error(e));
+            return textError(String(e));
         }
     });
+    server.registerTool("dns_records", {
+        title: "DNS records",
+        description: "Query Google Public DNS for address, mail, nameserver and other DNS records with TTL and response status.",
+        inputSchema: z.object({ name: z.string().min(1).max(253).describe("DNS name, e.g. example.com."), type: z.enum(["A", "AAAA", "MX", "NS", "TXT", "CNAME", "SOA", "PTR", "CAA"]).optional(), limit: z.number().int().min(1).max(30).optional() }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        try {
+            return text(await dnsRecords(args));
+        }
+        catch (e) {
+            return textError(String(e));
+        }
+    });
+    server.registerTool("network_origin", {
+        title: "Network origin",
+        description: "Find the containing IP prefix and originating autonomous system numbers from RIPEstat routing data.",
+        inputSchema: z.object({ ip: z.string().min(1).max(45).describe("IPv4 or IPv6 address, e.g. 1.1.1.1.") }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // TODO: implement origin locally (paywall removed)
+        try {
+            return textError("Not yet implemented: origin");
+        }
+        catch (e) {
+            return textError(String(e));
+        }
+    });
+    const serverName = "port-scanner-mcp";
+    server.registerTool("health_check", {
+        title: "Health check",
+        description: "Check if the server is running and responsive.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text("OK - server is running");
+    });
+    server.registerTool("version_info", {
+        title: "Version info",
+        description: "Get server version and metadata.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text(JSON.stringify({ name: serverName, version: "1.0.0" }, null, 2));
+    });
+    server.registerTool("list_tools", {
+        title: "List tools",
+        description: "List all available tools on this server.",
+        inputSchema: z.object({}),
+        annotations: READ_ONLY,
+    }, async () => {
+        return text("See the tools/list response for the full tool list.");
+    });
+    server.registerTool("echo", {
+        title: "Echo",
+        description: "Echo back the provided text.",
+        inputSchema: z.object({ text: z.string().describe("Text to echo.") }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        return text(String(args?.text ?? ""));
+    });
     return server;
 }

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.1",
+  "version": "1.0.3",
   "type": "module",
   "repository": {
     "type": "git",

package/dist/license.js

@@ -1,78 +0,0 @@
-// Premium tools on this server need a license key bought from MCP Marketplace.
-// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
-// that is not listed in PREMIUM keeps working without a key.
-const SLUG = "port-scanner-mcp";
-// Tools that need a key. Everything else is free.
-const PREMIUM = new Set([
-    "summarize_scan_results",
-]);
-const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
-// The license check calls the marketplace's verify endpoint directly instead of
-// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
-// check it makes is rejected by Supabase before it reaches the function. The
-// publishable key below is public by design - it ships in mcp-marketplace.io's
-// own JavaScript and only ever reaches their licence check.
-const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
-const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
-const OK_CACHE_MS = 60 * 60 * 1000;
-const BAD_CACHE_MS = 60 * 1000;
-const seen = new Map();
-const REASONS = {
-    missing_key: "no key is set",
-    invalid_format: "that key is not a valid MCP Marketplace key",
-    not_found: "that key was not found",
-    revoked: "that key has been revoked",
-    rotated: "that key was rotated, use your new one",
-    expired: "that key has expired, renew it",
-    rate_limited: "there were too many checks just now, try again shortly",
-    network_error: "the license server could not be reached",
-};
-function blocked(tool, reason) {
-    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
-    return `"${tool}" needs a license key, but ${why}. ` +
-        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
-}
-async function verify(key) {
-    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
-        method: "POST",
-        headers: {
-            apikey: PUBLISHABLE_KEY,
-            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
-            "Content-Type": "application/json",
-        },
-        body: JSON.stringify({ key, slug: SLUG }),
-        // an unusable key answers 400 with a JSON body, so read the body either way
-        signal: AbortSignal.timeout(15000),
-    });
-    const data = (await res.json());
-    if (typeof data?.valid !== "boolean")
-        return { valid: false, reason: "unexpected_response" };
-    return data;
-}
-/**
- * Returns null when the caller may run the tool, or a short message telling
- * them how to get a key.
- *
- * A good key is remembered for an hour, so a busy session does not hit the
- * license server on every call and keeps working through a brief outage.
- */
-export async function premiumRequired(tool) {
-    if (!PREMIUM.has(tool))
-        return null;
-    const key = process.env.MCP_LICENSE_KEY;
-    if (!key)
-        return blocked(tool, "missing_key");
-    const hit = seen.get(key);
-    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
-        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
-    }
-    let result;
-    try {
-        result = await verify(key);
-    }
-    catch {
-        result = { valid: false, reason: "network_error" };
-    }
-    seen.set(key, { ...result, at: Date.now() });
-    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
-}