MCP Hub › AI & Agents › Sn1per MCP Server: pentest, recon and attack surface scanning

Sn1per MCP Server: pentest, recon and attack surface scanning MCP server

by 1N3 · io.github.1N3/sn1per-mcp

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

🤖 AI & AgentsPythonv0.9.0
Open in MCP HubGitHub repository ↗Website ↗

How to install Sn1per MCP Server: pentest, recon and attack surface scanning

Python (uvx)

claude mcp add sn1per-mcp -- uvx sn1per-mcp==0.9.0

Or add it to your MCP config (Claude Desktop, Cursor, VS Code):

{
  "mcpServers": {
    "sn1per-mcp": {
      "command": "uvx",
      "args": [
        "sn1per-mcp==0.9.0"
      ]
    }
  }
}

Environment variables:
SNIPER_MCP_SCOPE – Comma-separated domains, IPs and CIDR ranges you are authorized to test (prefix ! to exclude). Scans outside it are refused.
SNIPER_MCP_SCOPE_FILE – Optional absolute path to a scope file with one or more entries per line and # comments.
SNIPER_MCP_AUTHORIZATION_REF – Optional authorization reference, such as a statement-of-work or ticket id, recorded in the audit log.
SNIPER_MCP_ALLOW_INTRUSIVE – Set to true to offer scan modes that run brute force, exploitation or injection testing. Off by default.
SNIPER_MCP_ENABLE_DESTRUCTIVE – Set to true to add the workspace delete and export tools; they ask the human to confirm. Off by default.
SNIPER_MCP_REDACT – Redaction of secrets in results. On by default; turn off only with a local model when raw values are required.
SNIPER_EDITION – Optional override of the auto-detected Sn1per edition.
SNIPER_BIN – Optional absolute path to the sniper CLI. Detected automatically on standard installs.
SNIPER_INSTALL_DIR – Optional Sn1per install directory. Read from the CLI or /usr/share/sniper by default.
SNIPER_LOOT_BASE – Optional directory that contains the loot workspace tree. Defaults to the install directory's loot folder.
SNIPER_SCAN_ENABLED – Set to false for a read-only deployment that never launches scans.

Replace placeholders in <angle brackets> with your own values. Review what a server can access before you enable it.

Details

Version
0.9.0
Published
2026-10-17
Updated
2026-10-17
Namespace
io.github.1N3
Source
1N3/sn1per-mcp

Similar ai & agents servers