fdp-mcp-server 0.1.1
QAX XLab's mcp server
Requires Python: >=3.13

<h1 align="center">fdp-mcp-server</h1>

> 中文说明：[README-zh_CN.md](README-zh_CN.md).

QiAnXin XLab provides MCP tools for accessing foundational network security data.

## About XLab
XLab is a research team under QiAnXin dedicated to large-scale network security research, threat analysis and attribution, and the construction of multidimensional security data platforms.

XLab is one of the earliest teams in China to leverage large-scale data for cybersecurity research, security applications, and threat intelligence generation. It built the country’s first PassiveDNS system, along with several industry-leading foundational data systems covering NetFlow, Whois, digital certificates, IPs, and malware samples.

# Tool Categories
The fdp-mcp-server provides multiple categories of tools. Users can select specific URLs to load the corresponding tools based on their needs.

Currently available tool sets:
1. Basic Network Security Data Query  
   URL: https://fdp.qianxin.com/mcp/v1/basic/mcp/  
   Includes:
    * **flint rrset**: Query Resource Record Sets (RRsets) for specific domain names and record types
    * **flint rdata**: Reverse lookup of DNS response rrset records
    * **whois history**: Retrieve registration history of domain names or IP addresses
    * **certdb domain**: Query certificate data by domain name
    * **ioc**: Search XLab’s IOC (Indicators of Compromise) database
2. Domain-Related Data Query  
   URL: https://fdp.qianxin.com/mcp/v1/domain/mcp/  
   Includes:
    * **codomain**: Retrieve co-occurring domains and their associated tags
    * **float_fqdn**: Domain popularity rankings based on PassiveDNS data
    * **webdb**: Retrieve webpage content associated with a domain
    * **libra**: Access analytical data on domains from XLab’s Libra platform
3. IP-Related Data Query  
   URL: https://fdp.qianxin.com/mcp/v1/ip/mcp/  
   Includes:
    * **ip_geo**: Lookup for IPv4 geolocation, ASN, and IP ownership
4. Sample-Related Data Query  
   URL: https://fdp.qianxin.com/mcp/v1/sample/mcp/  
   Includes:
    * **sandbox**: Retrieve summarized network behavior of samples

# Execution Methods
## Overview
1. This application functions as a proxy that translates remote MCP tool calls into local Stdio-based interactions. Therefore, tools can be used either locally or by directly accessing the remote MCP server via its URL.
2. The remote MCP server currently supports only **streamable HTTP** access.
3. This toolset is a **trial version** intended for basic use. Under high concurrency, the backend may restrict access frequency. For production or high-frequency scenarios, please use the official version.
4. For official access, use the corresponding tool URL and include two HTTP headers: `fdp-access` and `fdp-secret`.
    * To obtain credentials, please contact QiAnXin XLab.
5. The following examples are based on the ``Basic Network Security Data Query`` tool.

## Trial Version Usage
### Run Locally from Source Code
1. Clone the repository.
2. Use uv to run and configure Claude Desktop:
    ```json
    {
        "mcpServers": {
            "fdp-mcp-server": {
                "command": "uv",
                "args": [
                    "run",
                    "--project",
                    "/PATH/TO/fdp-mcp-server",
                    "fdp-mcp-server",
                    "--url",
                    "https://fdp.qianxin.com/mcp/v1/basic/mcp/"
                ]
            }
        }
    }
    ```

### Run with Docker
1. Clone the repository.
2. Build the Docker image: `docker build . fdp-mcp-server:vxx.xx.xx`
3. Configure Claude Desktop:
    ```json
    {
        "mcpServers": {
            "fdp-mcp-server": {
                "command": "docker",
                "args": [
                    "run",
                    "-i",
                    "--rm",
                    "fdp-mcp-server:vxx.xx.xx"
                ]
            }
        }
    }
    ```

### Run via PyPI Package
1. Use uvx and configure Claude Desktop as follows:
    ```json
        {
        "mcpServers": {
            "fdp-mcp-server": {
                "command": "uvx",
                "args": [
                    "fdp-mcp-server",
                    "--url",
                    "https://fdp.qianxin.com/mcp/v1/basic/mcp/"
                ]
            }
        }
    }
    ```

## Official Version Usage
If you want to call the fdp-mcp-server tools from within an intelligent agent application, you can configure the remote MCP server URL on the client side and include the required HTTP headers `fdp-access` and `fdp-secret`.

1. When writing agent code, add the headers when calling the MCP tools. Example using smolagents:
    ```python
    from smolagents import ToolCollection
    from smolagents.agents import ToolCallingAgent
    from smolagents.models import OpenAIServerModel


    def main():
        with ToolCollection.from_mcp(
            {
                "url": "https://fdp.qianxin.com/mcp/v1/domain/mcp/",
                "transport": "streamable-http",
                "headers": {
                    "fdp-access": "xxxx",
                    "fdp-secret": "yyyy",
                },
            },
            trust_remote_code=True,
        ) as tools:
            agent = ToolCallingAgent(
                tools=[*tools.tools],
                model=OpenAIServerModel(
                    model_id="YOUR-LLM-MODEL-ID",
                    api_base="YOUR-LLM-MODEL-API-URL",
                    api_key="YOUR-LLM-MODEL-API-KEY",
                ),
            )
            agent.run("Query the domains associated with www.example.com and assess its likely business purpose based on the associated data.")


    if __name__ == "__main__":
        main()
    ```
2. If using Claude Desktop, you can use the mcp-remote library for proxy forwarding and configure the HTTP headers during the process:
    ```json
    {
        "mcpServers": {
            "fdp_domain": {
                "command": "npx",
                "args": [
                    "-y",
                    "mcp-remote@latest",
                    "https://fdp.qianxin.com/mcp/v1/domain/mcp/",
                    "--header",
                    "fdp-access:xxxx",
                    "--header",
                    "fdp-secret:yyyy"
                ],
            }
        }
    }
    ```