Skip to main content
Glama
1N3

Sn1per MCP Server

Official
by 1N3

Launch Sn1per scan

sniper_scan
Destructive

Launch an active Sn1per scan of one authorized target and get an immediate job handle to poll while it runs in the background.

Instructions

Start an ACTIVE Sn1per scan of one target and return a job handle immediately; the scan keeps running in the background with root privileges and sends traffic to the target. Only call this for targets the operator has explicitly authorized. Targets outside the configured scope are refused and logged; if a target is refused, do not retry with alternate spellings, encodings, IP forms or wider ranges - ask the operator. Use the default mode stealth unless the operator asks for more; see sniper_status for what each mode does. Modes that run brute force or exploitation are available only if the operator enabled them. Sn1per may also query third-party services, check for engine updates and scan live hosts it finds inside a target range. Scans take minutes to hours: poll with scan_status(job_id) every few minutes, not in a loop. If you lose the job_id, call scan_status(workspace=...) and use recent_jobs.

Input Schema

NameRequiredDescriptionDefault
modeNoScan mode available on this host (see sniper_status). stealth is the lightest.stealth
portNoTCP port. Required only by modes that sniper_status lists with requires_port=true; refused by other modes.
targetYesOne target: a hostname (internationalized names allowed), an IPv4 address, an http(s) URL (reduced to its host), or an IPv4 CIDR range for mode discover. IPv6 is not supported in this version.
workspaceNoOptional engagement workspace name (letters, digits, '.', '_' and '-'; up to 128 characters; starts with a letter or digit). Defaults to a name derived from the target. Reuse one workspace per engagement.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructive/openWorld/non-idempotent, and the description adds material context beyond them: the scan runs with root privileges, sends real traffic to the target, out-of-scope targets are refused *and logged*, and Sn1per may query third-party services and scan live hosts it discovers within a range. It also sets duration expectations (minutes to hours) and gives a recovery path if the job handle is lost.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core action and the authorization constraint are front-loaded, and every sentence carries operational weight (scope refusal, defaults, polling cadence, job-handle recovery). It is dense though — the trailing scan_status guidance is valuable but makes the block longer than strictly needed for a launch tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive, open-world, non-idempotent scan launcher with no output schema, the description covers what an agent must know: what it returns, that it runs asynchronously, that authorization is a precondition, what to do on refusal, how to poll, and how to recover a lost job id. Nothing essential is left to inference.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so target formats, port requirements, workspace pattern and mode enum are already documented. The description only adds a soft usage nudge toward the stealth default and a gating note that brute-force/exploitation modes require operator enablement — useful, but not per-parameter meaning beyond the schema. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Start an ACTIVE Sn1per scan of one target') plus the immediate return value ('return a job handle immediately'). It also separates itself from async siblings by explaining the scan continues in the background, so an agent knows this is a fire-and-launch operation rather than a blocking one.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use constraints ('only call this for targets the operator has explicitly authorized'), defaults ('use the default mode stealth unless the operator asks for more'), and hard exclusions ('do not retry with alternate spellings, encodings, IP forms or wider ranges - ask the operator'). It also routes to alternatives: sniper_status for mode semantics and scan_status(job_id) for polling, with pacing guidance ('every few minutes, not in a loop').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.