# lookup.disclose.io

> Resolve any internet asset — domain, IP, ASN, URL, email, CIDR, package, repository, container, cloud resource, mobile app, hardware, browser extension, desktop app, or organization name — to the right security / vulnerability-disclosure contact (security.txt, bug bounty program, VDP, PSIRT, or national CERT). Free, CORS-open, unauthenticated. A disclose.io project.

One core endpoint, auto-classification, and cross-strategy chaining up to 3 hops (a package → its repo → the org's domain → its security.txt). Same engine powers the web UI, the HTTP API, and the MCP server, so behavior is identical across surfaces.

## API

- [POST /api/lookup](https://lookup.disclose.io/api/lookup): Body `{"input":"<asset>"}` → JSON `LookupResult`. The single core endpoint. Returns `attribution` (owner + jurisdiction + confidence), `contacts` (sorted by confidence; primary channels vs. fallbacks), `chains` (how strategies connected), and `dataSources`. The `status` field is `complete | partial | failed`. Rate limit: 30 req / 60s per IP. Supports `ETag` / `If-None-Match` (304). CORS `*`.
- [OpenAPI 3.1 spec](https://lookup.disclose.io/openapi.yaml): Full machine-readable contract — schemas, request/response examples, headers, error envelope. Best single file to hand an AI coding agent.
- [Swagger UI](https://lookup.disclose.io/api-docs): Interactive, try-it-out API reference.

## MCP (Model Context Protocol)

- Remote (streamable HTTP): `https://lookup.disclose.io/mcp` — stateless, no install, one-line to add. Clients must send `Accept: application/json, text/event-stream`.
- Local (stdio): `bun mcp.ts` from a clone of the repo.
- Tools: `lookup_security_contact` (full lookup → Markdown summary + structured `LookupResult`); `classify_asset` (instant asset-type classifier, no network).
- Add to Claude Code: `claude mcp add --transport http lookup https://lookup.disclose.io/mcp`

## Quickstart

- curl: `curl -s https://lookup.disclose.io/api/lookup -H 'Content-Type: application/json' -d '{"input":"cloudflare.com"}'`
- [Full agent guide (llms-full.txt)](https://lookup.disclose.io/llms-full.txt): every input type, the full request/response shape, contact-type semantics, rate limits, copy-paste JS/Python snippets, and the MCP handshake.

## Reference

- [API reference (Swagger)](https://lookup.disclose.io/api-docs)
- [disclose.io](https://disclose.io)