Sn1per MCP Server
OfficialRelated Servers
Alternatives to Sn1per MCP Server
No user-submitted related servers found.
Related Servers
- FlicenseNot gradedqualityCmaintenanceEnables AI agents to run passive, boundary, and gated active reconnaissance and web-security CLI tools (nmap, sqlmap, commix, httpx, ffuf, nikto, subfinder, and more) against authorized targets through a persistent, API-key-protected HTTP service. Scope gates, authorization windows, evidence capture, and a full audit trail are enforced in code so every tool call stays within the engagement's declared rules.-
- AlicenseNot gradedqualityAmaintenanceEnables professional penetration testers to drive recon and exploitation tooling — including nmap, gobuster, nikto, John the Ripper, hashcat, subfinder, ffuf, nuclei, hydra, and sqlmap — over stdio, Streamable HTTP, or SSE transports with bearer/OIDC auth. Also supports wordlist generation, engagement record capture, and automated client report creation with scope-of-work handling.298 npmGPL 3.0
- AlicenseBqualityCmaintenanceEnables AI coding assistants to perform authorized attack-surface reconnaissance and vulnerability intelligence through stdio JSON-RPC tools for HTTP probing, TCP port scanning, directory discovery, template checks, and CISA KEV/cve.now lookups.5MIT
- AlicenseNot gradedqualityAmaintenanceEnables AI clients to drive professional penetration-testing workflows—subdomain enumeration, host probing, content fuzzing, vulnerability scanning, brute-force, traffic capture, and exploitation sweeps—through a single MCP interface with stdio, Streamable HTTP, and legacy SSE transports plus bearer/OIDC auth. It also records engagement artifacts and generates client-ready reports with scope handling, cutting manual pentest administration.298 npmGPL 3.0
- AlicenseBqualityBmaintenanceEnables AI agents to conduct authorized pentests and bug-bounty workflows with scope enforcement, audit logging, reconnaissance, safe vulnerability checks, payload/wordlist generation, and professional report generation.14MIT
- FlicenseNot gradedqualityAmaintenanceExposes 21 tools over stdio that let any MCP-capable AI agent run real Kali-container security tools (nmap, nuclei, sqlmap, Metasploit), search a local 59,000+ CVE vulnerability database, and browse a 5,266-entry GitHub security tool index. Built-in guardrails refuse government, education, and military domains, and only whitelisted in-container executables can be invoked.3-
TDQS
Scored across 10 tools
Most tools target clearly different things: starting a scan, cancelling one, listing workspaces, and four distinct loot extractors (findings, ports, subdomains, technologies). The one real trap is `sniper_status` (server capability report) versus `scan_status` (job polling), which sound nearly interchangeable despite being quite different operations. Descriptions do disambiguate them, so risk is moderate rather than severe.
The dominant pattern is verb_noun (cancel_scan, list_workspaces, get_findings, get_ports, grep_loot), which is readable. But the naming is not systematic: the `sniper_` prefix appears on only two of ten tools, and it is used inconsistently — `sniper_scan` is a prefixed verb while `scan_status` is an unprefixed noun — creating two competing conventions for the same scan concept.
Ten tools is well within the sweet spot and each maps to a distinct step in the scan lifecycle (check status, start, poll, cancel) or a distinct loot type. No tool looks like padding, and nothing essential appears to be split across redundant entries.
The core loop is fully covered: open with sniper_status, launch with sniper_scan, poll with scan_status, abort with cancel_scan, then enumerate workspaces and read structured loot, with grep_loot as an escape hatch for anything unstructured. Gaps are minor — no workspace deletion/cleanup, no report export or scan-history listing beyond `recent_jobs`, and no host-inventory reader beyond per-category views.