
Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
registry version 0.9.0
Python
uvx sn1per-mcpPython
uvx sn1per-mcp@0.9.0
Pick your client — the config below is generated for this server (local stdio). Copy respects the “Pin version” switch above.
claude_desktop_config.json
{
"mcpServers": {
"sn1per-mcp": {
"command": "uvx",
"args": [
"sn1per-mcp"
]
}
}
}{
"mcpServers": {
"sn1per-mcp": {
"command": "uvx",
"args": [
"sn1per-mcp@0.9.0"
]
}
}
}Format verified against the official Claude Desktop docs ↗.
terminal
claude mcp add sn1per-mcp -- uvx sn1per-mcp
claude mcp add sn1per-mcp -- uvx sn1per-mcp@0.9.0
Format verified against the official Claude Code docs ↗.
.cursor/mcp.json
{
"mcpServers": {
"sn1per-mcp": {
"command": "uvx",
"args": [
"sn1per-mcp"
]
}
}
}{
"mcpServers": {
"sn1per-mcp": {
"command": "uvx",
"args": [
"sn1per-mcp@0.9.0"
]
}
}
}Format verified against the official Cursor docs ↗.
.vscode/mcp.json
{
"servers": {
"sn1per-mcp": {
"command": "uvx",
"args": [
"sn1per-mcp"
]
}
}
}{
"servers": {
"sn1per-mcp": {
"command": "uvx",
"args": [
"sn1per-mcp@0.9.0"
]
}
}
}Format verified against the official VS Code docs ↗.
mcp_config.json
{
"mcpServers": {
"sn1per-mcp": {
"command": "uvx",
"args": [
"sn1per-mcp"
]
}
}
}{
"mcpServers": {
"sn1per-mcp": {
"command": "uvx",
"args": [
"sn1per-mcp@0.9.0"
]
}
}
}Format verified against the official Windsurf docs ↗.
Defined in the server's official registry manifest. Required secrets are shown as <YOUR_…> placeholders in the configs above.
SNIPER_MCP_SCOPE — Comma-separated domains, IPs and CIDR ranges you are authorized to test (prefix ! to exclude). Scans outside it are refused.SNIPER_MCP_SCOPE_FILE — Optional absolute path to a scope file with one or more entries per line and # comments.SNIPER_MCP_AUTHORIZATION_REF — Optional authorization reference, such as a statement-of-work or ticket id, recorded in the audit log.SNIPER_MCP_ALLOW_INTRUSIVE — Set to true to offer scan modes that run brute force, exploitation or injection testing. Off by default.SNIPER_MCP_ENABLE_DESTRUCTIVE — Set to true to add the workspace delete and export tools; they ask the human to confirm. Off by default.SNIPER_MCP_REDACT — Redaction of secrets in results. On by default; turn off only with a local model when raw values are required.SNIPER_EDITION — Optional override of the auto-detected Sn1per edition.SNIPER_BIN — Optional absolute path to the sniper CLI. Detected automatically on standard installs.Distributed as Python, listed under Security. Review our MCP security guide before granting access to real data.
Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.
The MCP server itself is free to install. The source is public on https://github.com/1N3/sn1per-mcp. Any third-party service it calls may require its own API key and account.
Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.
Publish this server? Link back with a badge on your README or site — copy either snippet.
Markdown
[](https://mcpnav.net/server/sn1per-mcp/)
HTML
<a href="https://mcpnav.net/server/sn1per-mcp/"><img src="https://mcpnav.net/badge/sn1per-mcp.svg" alt="Listed on MCPNav" height="20"></a>