Loading…
Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
Sn1per MCP Server: pentest, recon and attack surface scanning is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 78/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding Sn1per MCP Server: pentest, recon and attack surface scanning to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
uvx sn1per-mcp==0.9.0Review the upstream source before running this command.
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-10-17T21:08:34.386458Z",
"publishedAt": "2026-10-17T21:08:34.386458Z",
"statusChangedAt": "2026-10-17T21:08:34.386458Z"
}
},
"server": {
"name": "io.github.1N3/sn1per-mcp",
"_meta": {
"io.modelcontextprotocol.registry/publisher-provided": {
"com.sn1persecurity": {
"controls": "Mandatory target scope, local JSONL audit log, secrets redaction; intrusive modes and destructive tools are off by default.",
"editions": [
"ce",
"se",
"pro",
"enterprise"
],
"platform": "linux",
"transport": "stdio only",
"intendedUse": "Authorized security testing only: systems you own or are explicitly permitted in writing to test.",
"documentation": "https://github.com/1N3/sn1per-mcp#readme",
"securityPolicy": "https://github.com/1N3/sn1per-mcp/security/policy",
"hostRequirements": "Runs beside a local Sn1per install (CE 9.x or the 11.x engine). Scan and delete tools need root through a passwordless sudo rule for the Sn1per CLI; read tools run unprivileged."
}
}
},
"icons": [
{
"src": "https://raw.githubusercontent.com/1N3/sn1per-mcp/v0.9.0/assets/sn1per-mcp-256.png",
"sizes": [
"256x256"
],
"mimeType": "image/png"
}
],
"title": "Sn1per MCP Server: pentest, recon and attack surface scanning",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.9.0",
"packages": [
{
"version": "0.9.0",
"transport": {
"type": "stdio"
},
"identifier": "sn1per-mcp",
"runtimeHint": "uvx",
"registryType": "pypi",
"registryBaseUrl": "https://pypi.org",
"environmentVariables": [
{
"name": "SNIPER_MCP_SCOPE",
"format": "string",
"description": "Comma-separated domains, IPs and CIDR ranges you are authorized to test (prefix ! to exclude). Scans outside it are refused.",
"placeholder": "app.example,192.0.2.0/24"
},
{
"name": "SNIPER_MCP_SCOPE_FILE",
"format": "filepath",
"description": "Optional absolute path to a scope file with one or more entries per line and # comments."
},
{
"name": "SNIPER_MCP_AUTHORIZATION_REF",
"format": "string",
"description": "Optional authorization reference, such as a statement-of-work or ticket id, recorded in the audit log."
},
{
"name": "SNIPER_MCP_ALLOW_INTRUSIVE",
"format": "boolean",
"default": "false",
"description": "Set to true to offer scan modes that run brute force, exploitation or injection testing. Off by default."
},
{
"name": "SNIPER_MCP_ENABLE_DESTRUCTIVE",
"format": "boolean",
"default": "false",
"description": "Set to true to add the workspace delete and export tools; they ask the human to confirm. Off by default."
},
{
"name": "SNIPER_MCP_REDACT",
"format": "boolean",
"default": "true",
"description": "Redaction of secrets in results. On by default; turn off only with a local model when raw values are required."
},
{
"name": "SNIPER_EDITION",
"format": "string",
"choices": [
"auto",
"ce",
"se",
"pro",
"enterprise"
],
"default": "auto",
"description": "Optional override of the auto-detected Sn1per edition."
},
{
"name": "SNIPER_BIN",
"format": "filepath",
"description": "Optional absolute path to the sniper CLI. Detected automatically on standard installs.",
"placeholder": "/usr/share/sniper/sniper"
},
{
"name": "SNIPER_INSTALL_DIR",
"format": "filepath",
"description": "Optional Sn1per install directory. Read from the CLI or /usr/share/sniper by default.",
"placeholder": "/usr/share/sniper"
},
{
"name": "SNIPER_LOOT_BASE",
"format": "filepath",
"description": "Optional directory that contains the loot workspace tree. Defaults to the install directory's loot folder.",
"placeholder": "/usr/share/sniper/loot"
},
{
"name": "SNIPER_SCAN_ENABLED",
"format": "boolean",
"default": "true",
"description": "Set to false for a read-only deployment that never launches scans."
}
]
}
],
"repository": {
"url": "https://github.com/1N3/sn1per-mcp",
"source": "github"
},
"websiteUrl": "https://github.com/1N3/sn1per-mcp#readme",
"description": "Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings."
}
}