blitzstrike MCP Server
Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.
blitzstrike scores 60 (Good), licensed MIT and written in TypeScript. It installs as a local process. It does not declare tools yet. Filed under Security. GitHub shows 510 stars. Package registries report about 452 downloads a week. Install configs are generated for 10 clients. Being listed in the registry is not the same as being vendor-official.
Good trust
60 of 100 from six public signals. Nobody can buy a point.
- OSI-style license: mit.
License, quality and maintenance
Quality: Grade D
53/100 for listing completeness. Lost points: short README, no listed tools.
How quality is graded
Where the 60 comes from
0 + 20 + 13 + 10 + 10 + 7 = 60. Each factor is capped, so no single signal can carry a listing.
Active in the official MCP registry, plus a known vendor namespace.
Registry: 0 of 30 points.How recently the repository saw a commit or release.
Maintenance: 20 of 20 points.GitHub stars and weekly downloads, on a log scale.
Popularity: 13 of 20 points.A clear, OSI-style open-source license.
License: 10 of 10 points.Not archived, a secure install path, a pinned version.
Security: 10 of 10 points.A real summary, a README with depth, listed tools.
Docs: 7 of 10 points.Install
Pick your client, copy the config, paste it in.
Needs Cursor or VS Code installed on this device. The button opens the app and asks you to confirm before it adds the server.
{ "mcpServers": { "shinthink-blitzstrike": { "command": "npx", "args": [ "-y", "blitzstrike@2.4.198" ] } }}
Environment variables
This server does not declare environment variables.
Tools
All capabilitiesTools show up when the registry metadata or the repository README lists them. Public READMEs are read directly. A GitHub token is used only when one is already configured.
About
Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.
Frequently asked questions
What is blitzstrike MCP Server?
Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.
How do I install blitzstrike MCP Server in Claude Desktop, Cursor, or VS Code?
Pick your client in the Install section on this page and copy the generated config into the client's config file. Step-by-step guides: Claude Desktop, Cursor, and VS Code. blitzstrike MCP Server runs locally from the npm package blitzstrike with the command npx -y blitzstrike@2.4.198.
Is blitzstrike MCP Server free and open source?
Yes. blitzstrike MCP Server is released under the MIT license, an OSI-approved open-source license, so you can use, modify, and self-host it under those terms.
Does blitzstrike MCP Server support remote (HTTP) connections?
No remote endpoint is listed for blitzstrike MCP Server. It runs locally on your machine over stdio, started by your MCP client.
How is blitzstrike MCP Server's trust score calculated?
blitzstrike MCP Server scores 60 out of 100 (Good). The score adds six capped public signals: registry status, maintenance, popularity, license, documentation, and security. Nobody can pay for points. Read the methodology for the full formula.
Reviews
No reviews yet—Be the first to review
No published reviews yet. Used it? Tell the next person how it went.
Sign inA verified email is required to review this server.
Add badge to your README
Paste either snippet into the repository README. The image links to this listing.
Manage this listing
Claim this serverRelated servers
virustotal
by burtthecoder · TypeScript
MCP server for querying VirusTotal API with comprehensive security analysis tools.
shodan
by burtthecoder · TypeScript
MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.
supply-chain-guard
by homeofe · TypeScript
Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.
CrowdStrike Falcon MCP Server
by crowdstrike · Python
Connects AI agents with CrowdStrike Falcon for security analysis and automation.
EchelonGraph CVE & Exposure
by echelongraph · JavaScript
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
dvalincode
by arthurpanhku · TypeScript
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.