Novelty

Burp inside your AI harness. An MCP security toolkit that plugs into your coding agent — Claude Code, Codex, OpenCode — and hunts real vulnerabilities in web apps and source code.

Add it once and your agent gains a Burp-style HTTP proxy (Repeater + Logger), an AI-driven vulnerability hunt, a whole-file source auditor, and a disposable-inbox helper for testing authenticated flows. Every finding is reasoned on Claude, not matched by a regex.

Novelty weights the classes that actually pay out: BOLA/IDOR · BFLA · XSS · SQLi · business logic · RCE · broken auth.

The brain

The reasoning layer runs on the official Anthropic SDK, defaulting to claude-opus-5 with an automatic server-side fallback to claude-opus-4-8 so a cyber-safeguard refusal on an authorized assessment still completes. Swap the model with one env var (ANTHROPIC_MODEL in backend/.env).

Related MCP server: pentestMCP

Install (works in any MCP harness)

Novelty ships as a package — no clone, no venv. uvx downloads and runs it. You only need uv installed and your ANTHROPIC_API_KEY.

The one command every harness runs under the hood:

uvx --from git+https://github.com/GOJO-SENPA1/novelty.git novelty-mcp

Claude Code (one-liner):

claude mcp add novelty --env ANTHROPIC_API_KEY=sk-ant-YOUR_KEY_HERE \
  -- uvx --from git+https://github.com/GOJO-SENPA1/novelty.git novelty-mcp

Codex — add to ~/.codex/config.toml:

[mcp_servers.novelty]
command = "uvx"
args = ["--from", "git+https://github.com/GOJO-SENPA1/novelty.git", "novelty-mcp"]
env = { ANTHROPIC_API_KEY = "sk-ant-YOUR_KEY_HERE" }

OpenCode — add to opencode.json:

{
  "mcp": {
    "novelty": {
      "type": "local",
      "command": ["uvx", "--from", "git+https://github.com/GOJO-SENPA1/novelty.git", "novelty-mcp"],
      "environment": { "ANTHROPIC_API_KEY": "sk-ant-YOUR_KEY_HERE" },
      "enabled": true
    }
  }
}

Cursor / Claude Desktop / Windsurf / Cline — add to the harness's mcp.json:

{
  "mcpServers": {
    "novelty": {
      "command": "uvx",
      "args": ["--from", "git+https://github.com/GOJO-SENPA1/novelty.git", "novelty-mcp"],
      "env": { "ANTHROPIC_API_KEY": "sk-ant-YOUR_KEY_HERE" }
    }
  }
}

Then just ask your agent: "use novelty to hunt example.com and write a report", or "review this file with novelty".

No uv? Install with curl -LsSf https://astral.sh/uv/install.sh | sh, or swap uvx for pipx run --spec git+https://github.com/GOJO-SENPA1/novelty.git novelty-mcp.

Tools (24)

Memory & arsenal

Novelty ships a persistent brain modelled on a real bug-bounty workspace:

• arsenal/ — a HackTricks-style bypass/technique reference per class (SQLi, XSS, IDOR/BOLA/BFLA, auth/JWT, RCE/SSTI, SSRF, traversal/LFI/upload, business logic/race, WAF bypass). The arsenal tool pulls a page when a hunt is blocked by a control, and its cues auto-prime the hunt brain.

• hunt log — recon/hunt/report append milestones (~/.novelty/hunt-log.jsonl, secrets scrubbed); hunt_log/remember read and add to it so a later session picks up.

• doctrine — an impact-first, non-destructive, chain-relentlessly creed baked into every AI prompt.

Reports

report_web, report_source, and report turn findings into a polished security-assessment report — an AI-written executive summary, an overall risk rating, a severity tally, and per-finding detail (exploitation, impact, evidence, a non-destructive confirm step, and remediation). You get clean Markdown back, and passing save_html writes a self-contained, print-ready HTML report in the Novelty aesthetic. report builds a report from findings you already collected (e.g. hunt output plus your own http_send/intruder evidence).

Run the site / API locally

The product is the MCP server. The Flask app just serves the product page and a health check the page reads for the live brain badge.

cd backend
python -m venv .venv && source .venv/bin/activate
pip install -r requirements.txt

cp .env.example .env        # paste your key into ANTHROPIC_API_KEY
python app.py               # serves the showcase page on http://127.0.0.1:5000

Deploy

The static product page (frontend/) deploys to Netlify — see DEPLOY.md. The MCP server and its brain run locally beside your agent; nothing about your traffic or code leaves the machine except the model calls.

⚠ Authorized use only

Point these tools at targets you own or have explicit, written permission to test. They are non-destructive and do not defeat CAPTCHAs or bot-detection. Secrets are never stored or logged.