---
title: "recon"
description: "Public-metadata domain intelligence through the recon MCP server and portable skills."
canonical: https://agentpluginsdirectory.com/plugins/recon
last-updated: 2026-09-28
---

# recon
Public-metadata domain intelligence through the recon MCP server and portable skills.
- Slug: recon
- Publisher: blisspixel
- Repository: https://github.com/blisspixel/recon
- Manifest: agents/agent-plugin/plugin.json
- Version: 2.19.6
- License: Apache-2.0
- Category (editorial): security
- Skills: 2 (recon-fingerprint-triage, recon)
- MCP servers: 1 (recon)
- Stars: 5
- Repository created: 2026-04-11
- Repository last pushed: 2026-09-21
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/recon
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What recon does, in the publisher's words

Schema-pinned portable packaging candidate for recon-tool 2.19.0. It contains the complete MCP surface and the two existing recon skills in the fixed Agent Plugins v1.0.0 locations.

This directory has passed offline validation against the vendored canonical Agent Plugins v1.0.0 schemas. Version 1.0.0 is Published. Offline validation is not an unqualified compatibility or conformance claim; promotion remains blocked on the frozen Visual Studio Code, Cursor, and Kiro representative-client evaluation.

Prerequisites:

- Python 3.11 or newer;
- recon-tool installed so the client can resolve the recon executable;
- client-controlled approval for any networked lookup.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/blisspixel/recon/HEAD/agents/agent-plugin/README.md

## Skills

- recon-fingerprint-triage: Triage recon fingerprint candidates across the bounded DNS catalog surface. Reads private single-domain discovery output, aggregate catalog baselines, or candidate queues, then classifies candidates as pending, promoted, rejected, or deferred under the v2.14 catalog-quality gates. Use when the user…
- recon: Public-metadata domain intelligence: Microsoft 365 / Google Workspace tenant identification, email security configuration (DMARC, DKIM, SPF, MTA-STS, BIMI), SaaS fingerprinting from DNS, certificate-transparency findings, related-domain discovery. Use when a domain name appears alongside phrases l…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

## MCP servers

- recon: transport: stdio; command: recon mcp; env: RECON_CONFIG_DIR

Read from the plugin's own mcp.json. Environment variable names only, never values.