web-recon-agent

Indexed by io.github.joepangallo

About

Owned-target web security assessment MCP server for authenticated, high-friction apps.

Use this server

Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.

Transportstdio (runs a local command)

Env varsMCP_TARGET_ALLOWLIST MCP_OWNED_TARGETS MCP_JOB_STORE_PATH MCP_MAX_CONCURRENT MCP_CONFIG_PATH

Claude Code

claude mcp add --env MCP_TARGET_ALLOWLIST= --env MCP_OWNED_TARGETS= --env MCP_JOB_STORE_PATH= --env MCP_MAX_CONCURRENT= --env MCP_CONFIG_PATH= web-recon-agent -- npx mcp-web-recon-agent

Cursor

Add to Cursor

If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.

VS Code

code --add-mcp '{"name":"web-recon-agent","command":"npx","args":["mcp-web-recon-agent"],"env":{"MCP_TARGET_ALLOWLIST":"","MCP_OWNED_TARGETS":"","MCP_JOB_STORE_PATH":"","MCP_MAX_CONCURRENT":"","MCP_CONFIG_PATH":""}}'

JSON

{
  "mcpServers": {
    "web-recon-agent": {
      "command": "npx",
      "args": [
        "mcp-web-recon-agent"
      ],
      "env": {
        "MCP_TARGET_ALLOWLIST": "",
        "MCP_OWNED_TARGETS": "",
        "MCP_JOB_STORE_PATH": "",
        "MCP_MAX_CONCURRENT": "",
        "MCP_CONFIG_PATH": ""
      }
    }
  }
}

Environment variables are listed by name only — fill in your own values. Entries never carry secrets.