Assetnote MCP

Assetnote continuously discovers and monitors an organisation's external attack surface. This connector lets Claude answer questions about it, and manage it, in plain language.

Find assets by technology, version, HTTP title or status code, certificate expiry, DNS record, tag or asset group. List unresolved, triaged, resolved or ignored exposures, open one with its details, recommendations, CVE intelligence and timeline, and read the HTTP evidence behind it. Look up technologies, source domains, asset groups and the instance's users (admin roles only), or count anything without listing it. For large result sets, export CSV or JSON on the Assetnote instance and download it from the Assetnote UI.

With write access it can also change assets' monitoring, notifications, verification and sensitivity, add or clear tags, clear a Mass VHosting risk, change an asset group's recon, notification settings, notification targets and blacklist, promote a subdomain to a source domain, and import hosts, domains, IP ranges and ASNs. Every change tool previews by default and changes nothing until it is called again with confirmation, and Claude asks you before each change runs. Changes name their targets explicitly, never a filter; the preview says when a change reaches further or starts discovery or scanning.

You sign in with your Assetnote account and choose whether to allow changes. The connector never sees or does more than your Assetnote role and asset-group scope allow. It does not delete assets, exposures, domains or asset groups, triage exposures or start manual scans.

Requires an Assetnote subscription.