Cognita MCP Tools
Cognita exposes 51 tools. Each one has its own page with the configuration for every client that can run this server.
-
asn_prefixesasn prefixes
-
cve_triagecve triage
-
typosquat_scantyposquat scan
-
email_header_analyzeremail header analyzer
-
dns_propagationdns propagation
-
email_postureemail posture
-
ct_org_searchct org search
-
geo_routegeo route
-
tls_posturetls posture
-
feodo_c2_checkfeodo c2 check
-
dmarc_checkdmarc check
-
tranco_ranktranco rank
-
rpki_validationrpki validation
-
cve_lookupcve lookup
-
spoofabilityspoofability
-
subdomain_takeover_checksubdomain takeover check
-
tls_certificatetls certificate
-
dns_lookupdns lookup
-
dshield_ip_checkdshield ip check
-
host_exposurehost exposure
-
scan_sitescan site
-
abuse_contactabuse contact
-
kev_checkkev check
-
reverse_dnsreverse dns
-
ip_reputationip reputation
-
hsts_preload_checkhsts preload check
-
disclosure_contactsdisclosure contacts
-
rdaprdap
-
tor_exit_checktor exit check
-
robots_sitemaprobots sitemap
-
passive_dnspassive dns
-
ip_blocklist_checkip blocklist check
-
epss_scoreepss score
-
spf_expandspf expand
-
asn_relationsasn relations
-
spf_checkspf check
-
wayback_snapshotwayback snapshot
-
cert_revocationcert revocation
-
cert_transparencycert transparency
-
related_domainsrelated domains
-
zone_transfer_checkzone transfer check
-
urlscan_lookupurlscan lookup
-
mx_lookupmx lookup
-
dkim_lookupdkim lookup
-
investigateinvestigate
-
wayback_urlswayback urls
-
blacklist_checkblacklist check
-
ip_reputation_aggregateip reputation aggregate
-
asn_geoipasn geoip
-
security_txtsecurity txt
-
caa_dnsseccaa dnssec
This list was read from the server itself, by connecting to it and calling tools/list on 16 October 2026. It is what
the server actually exposes, not what its listing claims.
Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.