Skip to contentweb-recon-agent MCP Server | MCPpediaWweb-recon-agent MCP Server
Owned-target web security assessment MCP server for authenticated, high-friction apps.
20LimitedInstall
~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"joepangallo-web-recon-agent": {
"command": "npx",
"args": [
"-y",
"mcp-web-recon-agent@0.8.1"
],
"env": {
"MCP_TARGET_ALLOWLIST": "",
"MCP_OWNED_TARGETS": "",
"MCP_JOB_STORE_PATH": "",
"MCP_MAX_CONCURRENT": "",
"MCP_CONFIG_PATH": ""
}
}
}
}
Related servers
XReal-time data-breach lookup and analytics for emails and domains from XposedOrNot.
Environment
| Name | Required | Notes |
|---|
| MCP_TARGET_ALLOWLIST | Yes | Comma-separated hostnames allowed for scanning. Required. |
| MCP_OWNED_TARGETS | No | Comma-separated hostnames you explicitly own to unlock active and owned-aggressive scan modes. |
| MCP_JOB_STORE_PATH | No | Optional path for persisted job metadata. Defaults to mcp-jobs.json in the current working directory. |
| MCP_MAX_CONCURRENT | No | Optional maximum number of concurrent scan jobs. Defaults to 2. |
| MCP_CONFIG_PATH | No | Optional path to a JSON config file that overrides allowlist and concurrency settings. |
Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.
About
MCP server for analyst-first owned-target web security assessments of authenticated, high-friction apps
FAQ
- What is web-recon-agent?
- Owned-target web security assessment MCP server for authenticated, high-friction apps.
- How do I install web-recon-agent?
- Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
- Is web-recon-agent official?
- No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
- How is the trust score calculated?
- This listing scores 20 (Limited). The formula is published on the methodology page.
Reviews
0 published · no average
Sign in to review this server.
Good
GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more.
NReact Native and Expo health check: upgrade blockers, store rules, crash risks, security findings
FFederated messaging with your fmsg hosting provider. Connect with OAuth or an API key.
SDeterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.
MCompact MCP server for SAP ABAP ADT over HTTP, RFC or SNC: one tool per operation, object in args