Skip to main content
Glama
deenesjakoruzh
IAZENT

HuntX

Official
by IAZENT
OverviewSchemaRelated ServersScoreDiscussions
Python
Local

HuntX

个人 MCP（Model Context Protocol）服务器，为 Claude Code（或任何兼容 MCP 的客户端）提供对安全测试原语的直接工具访问，用于漏洞赏金狩猎：侦察查询/触发、HTTP 请求重放、IDOR/BOLA 模糊测试、SQLi/XSS/SSTI/SSRF 检测、JWT/OAuth 测试、秘密扫描、错误配置/暴露检查，以及跨会话的持久狩猎记忆和置信度评分发现。

每个发现都会获得一个置信度级别（confirmed/likely/needs_review），并且未经明确的人工审查，任何内容都不会自动升级——完整的设计原则请参阅 AGENTS.md。

要求

  • Python 3.12+

  • uv

可选的外部工具

大多数适配器可独立工作。少数会调用外部 CLI 工具——仅当您需要相应适配器时才安装这些工具：

适配器

依赖

secrets_scan

gitleaks、trufflehog 位于 PATH 中

nuclei_scanner

nuclei 位于 PATH 中（使用模板：nuclei -update-templates）

recon_bridge / recon_trigger

已安装 reconFTW — recon_bridge 读取其 Recon/<domain>/ 输出，recon_trigger 直接运行它

Related MCP server: recon-mcp

设置

uv sync
uv run huntx

然后在你的 Claude Code 配置中将 HuntX 添加为 MCP 服务器，指向此项目的 huntx 入口点。

配置（环境变量）

变量

默认值

用途

HUNTX_DB_PATH

~/.huntx/memory.db

用于请求历史和发现的 SQLite 数据库

HUNTX_OOB_SERVER

公共 interactsh 池（oast.pro）

用于 ssrf_scanner 带外检测的 Interactsh 服务器。在测试任何敏感内容之前，请将其设置为自托管的 interactsh-server 实例 — 公共池的“零日志”声明未经审计，目标通过 SSRF 泄露的任何数据都会经过该第三方服务器。如果未设置此项，ssrf_scan 会记录警告并在其结果中标记 oob_is_public_pool: true，因此绝不会静默。

Install Server
F
license - not found
A
quality
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

View all tools

Related MCP Servers

  • Bug Bounty MCP Server

    akinabudu
    F
    license
    -
    quality
    D
    maintenance
    A comprehensive MCP server for automated bug bounty hunting and security reconnaissance, featuring over 28 specialized tools for subdomain discovery, vulnerability scanning, and traffic analysis. It integrates automated scope validation and professional reporting across multiple platforms like HackerOne and Bugcrowd to streamline security testing.
    5

  • recon-mcp

    tobiasGuta
    A
    license
    -
    quality
    B
    maintenance
    A local Python MCP server for safe, human-led bug bounty recon, providing lightweight helpers for scope checks, headers, robots.txt, sitemap.xml, JavaScript URL collection, endpoint extraction, URL deduplication, evidence notes, and manual test planning.
    MIT

  • Bug Bounty Assistant MCP

    rohitprasad-code
    A
    license
    A
    quality
    B
    maintenance
    An MCP server that provides passive and low-impact active reconnaissance tools for authorized bug bounty and security assessments, enabling LLMs to perform structured recon and generate reports.
    11
    Apache 2.0

  • BountyProof MCP

    skyxtools
    A
    license
    B
    quality
    C
    maintenance
    An MCP server for authorized bug bounty work that enforces an evidence-driven workflow with session management, preflight checks, surface discovery, and verified scanning.
    12
    MIT

View all related MCP servers

Related MCP Connectors

  • mcp-server

    MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

  • MCP Fortress

    Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

  • govern

    Hosted MCP server for agent governance: MCP config audits, injection scans, scope-policy checks.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/IAZENT/HuntX'

If you have feedback or need assistance with the MCP directory API, please join our Discord server