io.github.joepangallo/web-recon-agent

io.github.joepangallo/web-recon-agent

Owned-target web security assessment MCP server for authenticated, high-friction apps.

View repository →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "web-recon-agent": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-web-recon-agent@0.8.1"
      ],
      "env": {
        "MCP_TARGET_ALLOWLIST": "<your MCP_TARGET_ALLOWLIST>"
      }
    }
  }
}
Environment variables
  • MCP_TARGET_ALLOWLISTrequiredComma-separated hostnames allowed for scanning. Required.

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.8.1
Registry
active
Published
3/25/2026

More Developer Tools servers

Browse all Developer Tools →

io.github.JoernBerkefeld/mcp-server-mcdev

JoernBerkefeld

Native mcdev through AI: retrieve, build, deploy, command discovery and offline docs.

Developer ToolsAdded 2 weeks ago

io.github.JoernBerkefeld/mcp-server-sfmc

JoernBerkefeld

SFMC AMPscript/SSJS/GTL tools + searchable help for 7 MC products (Engagement, Pardot…) via MCP.

Developer ToolsAdded 3 weeks ago

Synmerco

synmerco

Escrow, trust scores, and marketplace for AI agent commerce on 5 chains. 38 tools, 8 free.

Developer ToolsAdded 2 months ago

io.github.joeyaflores/ourpr-mcp-server

joeyaflores

Read your own ourpr running history in an AI agent, and put a plan on the week ahead.

Developer ToolsAdded 1 month ago

io.github.JoeyBrar/agentseal

JoeyBrar

Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain.

Developer ToolsAdded 6 months ago

AgentBreakWatch

joeyg6393

Audit AI Agent SDKs and MCP servers for breaking changes, schema drift, and migration fixes.

Developer ToolsAdded 2 weeks ago

Add the badge to your site

Show visitors that io.github.joepangallo/web-recon-agent is listed here — it’s also the link we check for a free listing.

io.github.joepangallo/web-recon-agent — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-joepangallo-web-recon-agent?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="io.github.joepangallo/web-recon-agent — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![io.github.joepangallo/web-recon-agent — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-joepangallo-web-recon-agent?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.