Sn1per MCP Server: pentest, recon and attack surface scanning

io.github.1N3/sn1per-mcp

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "sn1per-mcp": {
      "command": "uvx",
      "args": [
        "sn1per-mcp"
      ],
      "env": {
        "SNIPER_MCP_ALLOW_INTRUSIVE": "false",
        "SNIPER_MCP_ENABLE_DESTRUCTIVE": "false",
        "SNIPER_MCP_REDACT": "true",
        "SNIPER_EDITION": "auto",
        "SNIPER_SCAN_ENABLED": "true"
      }
    }
  }
}
Environment variables
  • SNIPER_MCP_ALLOW_INTRUSIVESet to true to offer scan modes that run brute force, exploitation or injection testing. Off by default.
  • SNIPER_MCP_ENABLE_DESTRUCTIVESet to true to add the workspace delete and export tools; they ask the human to confirm. Off by default.
  • SNIPER_MCP_REDACTRedaction of secrets in results. On by default; turn off only with a local model when raw values are required.
  • SNIPER_EDITIONOptional override of the auto-detected Sn1per edition.
  • SNIPER_SCAN_ENABLEDSet to false for a read-only deployment that never launches scans.

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.9.0
Registry
active
Published
10/17/2026
Browse all Developer Tools →

Add the badge to your site

Show visitors that Sn1per MCP Server: pentest, recon and attack surface scanning is listed here — it’s also the link we check for a free listing.

Sn1per MCP Server: pentest, recon and attack surface scanning — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-1n3-sn1per-mcp?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="Sn1per MCP Server: pentest, recon and attack surface scanning — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![Sn1per MCP Server: pentest, recon and attack surface scanning — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-1n3-sn1per-mcp?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.