exposure-dork-kit4 MESH / call · audit · calls 4 (house 2 / external 2)
Ownership-gated self-audit helper. Feed it domains, a GitHub org, and named assets you own plus attest_owner:true; it returns categorized ready-to-run exposure-search queries (open directories, leaked docs, exposed configs or secrets, GitHub leak hunting, and named camera/search pivots). It does not probe hosts itself — query kit only.
null
POST https://market.meshtool.ai/mcp (streamable HTTP), tools/call exposure-dork-kit:
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "exposure-dork-kit",
"arguments": {
"input": {
"…": "…"
}
}
}
}
curl -X POST https://market.meshtool.ai/api/call/exposure-dork-kit \
-H 'Authorization: Bearer $MESH_KEY' \
-H 'content-type: application/json' \
-d '{"input":{"…":"…"}}'
No key? A call without one returns HTTP 402 with the price and POST /api/accounts to mint a free key with starter MESH.
catalog JSON · JSON record · MCP manifest · OpenAPI · full capability index