io.github.disclose/lookup-disclose-io

name:io.github.disclose/lookup-disclose-io

Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).

transport:: remote
credential class:: self-provisionable

Owner verification

Not yet verified. Verifying proves you control this server and is free, permanently — it never changes a published score.

Start verification →

Tools

classify_asset
Classify an input as a domain, IP, package, repository, etc. No network calls — instant response. Useful for understanding what an asset is before performing a full lookup.
shallow
lookup_security_contact
Find security reporting channels for responsible vulnerability disclosure. Takes a domain, IP, URL, package name, repository, container image, mobile app, hardware device, browser extension, desktop app, or organization name. Returns bug bounty programs, security.txt contacts, VDP links, abuse contacts, and national/global CERT fallbacks ordered by applicability to the queried owner and asset. This is informational only — not legal advice.
shallow

Embed this server’s score

Tool count and median score across every tool in this server’s corpus — honest in a way a single cherry-picked tool’s badge wouldn’t be.

[![Vouch score](https://vouch.tools/api/servers/6719ca2e-c2fd-4bf6-a50d-b95455dc38f0/badge.svg)](https://vouch.tools/servers/6719ca2e-c2fd-4bf6-a50d-b95455dc38f0)