Sn1per MCP Server: pentest, recon and attack surface scanning

by 1N3·io.github.1N3/sn1per-mcp·v0.9.0·2 stars

No reviews yet

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

A92/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A92/100

full report

Adoption

Growing

2 stars41 downloads/wk

Reviews

Write one

Nobody has reviewed Sn1per MCP Server: pentest, recon and attack surface scanning yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Sn1per MCP Server: pentest, recon and attack surface scanning tools (5, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

cancel_scanwrite action
delete_workspacewrite action
export_workspace
scan_status
sniper_status

Public scan report

scanner v0.1.10 · 2026-10-28 · same rubric, same numbers if you re-run it

no findings

Code scan27 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Sn1per MCP Server: pentest, recon and attack surface scanning compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 92/100; higher than 95% of 918 Security servers
Tools: 5; the typical Security server has 6
Tools that change things: 40%; typical: 0%. Fewer write tools means less an agent can break
GitHub stars: 2; more than 75% of 585 Security servers
Downloads a week: 41; more than 35% of 240 Security servers with a package

What its tools let an agent do: 3 read · 2 delete

Install Sn1per MCP Server: pentest, recon and attack surface scanning in Claude Code, Cursor or VS Code

claude mcp add sn1per-mcp -- uvx sn1per-mcp

Add to Cursor

What the publisher says

From the Sn1per MCP Server: pentest, recon and attack surface scanning repository's README, as published. We do not edit it. Read it on GitHub

Sn1per MCP Server

Drive your self-hosted Sn1per from your AI assistant: scoped, audited, for authorized testing.

For authorized security testing only. Use the Sn1per MCP Server only against systems you own or are explicitly permitted, in writing, to test, and within the scope of that permission.

Status: beta (0.9.x). Tool names, parameters and output fields follow the compatibility promise for 0.x releases.

What it does

Sn1per MCP Server connects the AI assistant you already use to the Sn1per installation on your own Linux host. It runs locally over stdio beside Sn1per, refuses scan requests for targets outside the scope you configure (see the limits), records every scan, cancel, delete and export request it acts on in a local audit log, and returns Sn1per's findings, open ports, subdomains and technologies as structured data with secrets redacted by default. It supports Sn1per Community Edition 9.x and the 11.x engine used by SE, Professional and Enterprise; the edition matrix lists what has been verified. It is free and open source under the Apache-2.0 license, and is intended for authorized security testing only.

The server runs beside Sn1per on your host: loot stays there, and tool results leave the host only through your MCP client and the model service it uses. Read Data handling and privacy for what does leave the host.

Sn1per does the scanning. The Sn1per MCP Server lets the AI assistant you already use drive it. Generic tool-runner MCP servers expose individual commands. The Sn1per MCP Server drives Sn1per's orchestrated scan modes and returns its structured results, with scope enforcement and an audit log.

What it is not

It is not a scanner by itself. It launches and reads the Sn1per installation that is already on your host.
It does not include Sn1per. Install Sn1per first (Sn1per Community Edition, or the Professional or Enterprise installer from your licence).
It is not for shared multi-user hosts. Run it on a dedicated, single-user scanning VM or container.

Requirements

A Linux host with Sn1per Community Edition 9.x or the 11.x engine (Sn1per SE, Sn1per Professional or Sn1per Enterprise).
Python 3.11 or later. Ubuntu 22.04 and Kali 2022.x ship Python 3.10 and need a uv-managed Python (install guide).
Root, or a passwordless sudo rule for the Sn1per CLI. That rule is equivalent to full root access for the user it names; read the security model before you add it.
An MCP client that runs local stdio servers. Web, mobile and remote-connector clients are not supported in 0.9.0 (stdio only).

Quick start

Replace with the user who runs your MCP client. The env file is the canonical configuration, so --check sees exactly what the client will run.

Install pipx, then install the server as that user (never run pipx with sudo):

sudo apt install pipx
   pipx ensurepath
   # open a new shell, then:
   pipx install sn1per-mcp==0.9.0

Create the env file /home//.config/sn1per-mcp/env with mode 0600:

mkdir -p /home/<user>/.config/sn1per-mcp
   install -m 0600 /dev/null /home/<user>/.config/sn1per-mcp/env

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Sn1per MCP Server: pentest, recon and attack surface scanning: common questions

Is Sn1per MCP Server: pentest, recon and attack surface scanning safe?: Yes, by our scan: it is graded A (92/100). Read the Sn1per MCP Server: pentest, recon and attack surface scanning safety report
How do I install Sn1per MCP Server: pentest, recon and attack surface scanning?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Sn1per MCP Server: pentest, recon and attack surface scanning need an API key?: No secret keys are declared. It reads 11 settings from the environment.
Is Sn1per MCP Server: pentest, recon and attack surface scanning maintained?: The last commit was 5 days ago (2026-10-28). The latest release is v0.9.0.
What can I use instead of Sn1per MCP Server: pentest, recon and attack surface scanning?: Servers from other publishers that do the same job: Keyspoor MCP server, Pentest MCP server and Jikida MCP server. Compare all Sn1per MCP Server: pentest, recon and attack surface scanning alternatives.
How does Sn1per MCP Server: pentest, recon and attack surface scanning compare with other Security MCP servers?: safety score 92/100 (higher than 95% of 918 Security servers); tools 5 (the typical Security server has 6); tools that change things 40% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Sn1per MCP Server: pentest, recon and attack surface scanning

Same job from other publishers: the closest match first, then the best rated.

All Sn1per MCP Server: pentest, recon and attack surface scanning alternatives →

Keyspoor
Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.
not reviewed
Growing
A
Pentest
Offline methodology engine for authorized penetration testing, CTF, and security research.
not reviewed
Growing
B
Jikida
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
not reviewed
Growing
A
ZeroDOM
The deterministic attack-surface perception layer for AI security agents
not reviewed
Growing
A
PyMemoryEditor
Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.
not reviewed
Established
A

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: A · 92/100
Stars: 2
Downloads/wk: 41
Price: Free
Licence: Apache-2.0
Transport: Local · pypi
Version: 0.9.0
Category: Security
Last release: 2026-10-28

Credentials it needs

SNIPER_MCP_SCOPEComma-separated domains, IPs and CIDR ranges you are authorized to test (prefix ! to exclude). Scans outside it are refused.
SNIPER_MCP_SCOPE_FILEOptional absolute path to a scope file with one or more entries per line and # comments.
SNIPER_MCP_AUTHORIZATION_REFOptional authorization reference, such as a statement-of-work or ticket id, recorded in the audit log.
SNIPER_MCP_ALLOW_INTRUSIVESet to true to offer scan modes that run brute force, exploitation or injection testing. Off by default.
SNIPER_MCP_ENABLE_DESTRUCTIVESet to true to add the workspace delete and export tools; they ask the human to confirm. Off by default.
SNIPER_MCP_REDACTRedaction of secrets in results. On by default; turn off only with a local model when raw values are required.
SNIPER_EDITIONOptional override of the auto-detected Sn1per edition.
SNIPER_BINOptional absolute path to the sniper CLI. Detected automatically on standard installs.
SNIPER_INSTALL_DIROptional Sn1per install directory. Read from the CLI or /usr/share/sniper by default.
SNIPER_LOOT_BASEOptional directory that contains the loot workspace tree. Defaults to the install directory's loot folder.
SNIPER_SCAN_ENABLEDSet to false for a read-only deployment that never launches scans.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/1n3-sn1per-mcp.svg)](https://mcp.market/server/1n3-sn1per-mcp)

How the badge works