Sn1per MCP Server: pentest, recon and attack surface scanning

io.github.1N3/sn1per-mcp · v0.9.0

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

Website Source code Set it up

Connect Runs on your machine

Terminal

claude mcp add sn1per-mcp -e SNIPER_MCP_SCOPE=<SNIPER_MCP_SCOPE> -e SNIPER_MCP_SCOPE_FILE=<SNIPER_MCP_SCOPE_FILE> -e SNIPER_MCP_AUTHORIZATION_REF=<SNIPER_MCP_AUTHORIZATION_REF> -e SNIPER_MCP_ALLOW_INTRUSIVE=<SNIPER_MCP_ALLOW_INTRUSIVE> -e SNIPER_MCP_ENABLE_DESTRUCTIVE=<SNIPER_MCP_ENABLE_DESTRUCTIVE> -e SNIPER_MCP_REDACT=<SNIPER_MCP_REDACT> -e SNIPER_EDITION=<SNIPER_EDITION> -e SNIPER_BIN=<SNIPER_BIN> -e SNIPER_INSTALL_DIR=<SNIPER_INSTALL_DIR> -e SNIPER_LOOT_BASE=<SNIPER_LOOT_BASE> -e SNIPER_SCAN_ENABLED=<SNIPER_SCAN_ENABLED> -- uvx sn1per-mcp==0.9.0

claude_desktop_config.json

{
  "mcpServers": {
    "sn1per-mcp": {
      "command": "uvx",
      "args": [
        "sn1per-mcp==0.9.0"
      ],
      "env": {
        "SNIPER_MCP_SCOPE": "<SNIPER_MCP_SCOPE>",
        "SNIPER_MCP_SCOPE_FILE": "<SNIPER_MCP_SCOPE_FILE>",
        "SNIPER_MCP_AUTHORIZATION_REF": "<SNIPER_MCP_AUTHORIZATION_REF>",
        "SNIPER_MCP_ALLOW_INTRUSIVE": "<SNIPER_MCP_ALLOW_INTRUSIVE>",
        "SNIPER_MCP_ENABLE_DESTRUCTIVE": "<SNIPER_MCP_ENABLE_DESTRUCTIVE>",
        "SNIPER_MCP_REDACT": "<SNIPER_MCP_REDACT>",
        "SNIPER_EDITION": "<SNIPER_EDITION>",
        "SNIPER_BIN": "<SNIPER_BIN>",
        "SNIPER_INSTALL_DIR": "<SNIPER_INSTALL_DIR>",
        "SNIPER_LOOT_BASE": "<SNIPER_LOOT_BASE>",
        "SNIPER_SCAN_ENABLED": "<SNIPER_SCAN_ENABLED>"
      }
    }
  }
}

~/.cursor/mcp.json

{
  "mcpServers": {
    "sn1per-mcp": {
      "command": "uvx",
      "args": [
        "sn1per-mcp==0.9.0"
      ],
      "env": {
        "SNIPER_MCP_SCOPE": "<SNIPER_MCP_SCOPE>",
        "SNIPER_MCP_SCOPE_FILE": "<SNIPER_MCP_SCOPE_FILE>",
        "SNIPER_MCP_AUTHORIZATION_REF": "<SNIPER_MCP_AUTHORIZATION_REF>",
        "SNIPER_MCP_ALLOW_INTRUSIVE": "<SNIPER_MCP_ALLOW_INTRUSIVE>",
        "SNIPER_MCP_ENABLE_DESTRUCTIVE": "<SNIPER_MCP_ENABLE_DESTRUCTIVE>",
        "SNIPER_MCP_REDACT": "<SNIPER_MCP_REDACT>",
        "SNIPER_EDITION": "<SNIPER_EDITION>",
        "SNIPER_BIN": "<SNIPER_BIN>",
        "SNIPER_INSTALL_DIR": "<SNIPER_INSTALL_DIR>",
        "SNIPER_LOOT_BASE": "<SNIPER_LOOT_BASE>",
        "SNIPER_SCAN_ENABLED": "<SNIPER_SCAN_ENABLED>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "sn1per-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "sn1per-mcp==0.9.0"
      ],
      "env": {
        "SNIPER_MCP_SCOPE": "<SNIPER_MCP_SCOPE>",
        "SNIPER_MCP_SCOPE_FILE": "<SNIPER_MCP_SCOPE_FILE>",
        "SNIPER_MCP_AUTHORIZATION_REF": "<SNIPER_MCP_AUTHORIZATION_REF>",
        "SNIPER_MCP_ALLOW_INTRUSIVE": "<SNIPER_MCP_ALLOW_INTRUSIVE>",
        "SNIPER_MCP_ENABLE_DESTRUCTIVE": "<SNIPER_MCP_ENABLE_DESTRUCTIVE>",
        "SNIPER_MCP_REDACT": "<SNIPER_MCP_REDACT>",
        "SNIPER_EDITION": "<SNIPER_EDITION>",
        "SNIPER_BIN": "<SNIPER_BIN>",
        "SNIPER_INSTALL_DIR": "<SNIPER_INSTALL_DIR>",
        "SNIPER_LOOT_BASE": "<SNIPER_LOOT_BASE>",
        "SNIPER_SCAN_ENABLED": "<SNIPER_SCAN_ENABLED>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

Name	Description
`SNIPER_MCP_SCOPE` Optional	Comma-separated domains, IPs and CIDR ranges you are authorized to test (prefix ! to exclude). Scans outside it are refused.
`SNIPER_MCP_SCOPE_FILE` Optional	Optional absolute path to a scope file with one or more entries per line and # comments.
`SNIPER_MCP_AUTHORIZATION_REF` Optional	Optional authorization reference, such as a statement-of-work or ticket id, recorded in the audit log.
`SNIPER_MCP_ALLOW_INTRUSIVE` Optional	Set to true to offer scan modes that run brute force, exploitation or injection testing. Off by default.
`SNIPER_MCP_ENABLE_DESTRUCTIVE` Optional	Set to true to add the workspace delete and export tools; they ask the human to confirm. Off by default.
`SNIPER_MCP_REDACT` Optional	Redaction of secrets in results. On by default; turn off only with a local model when raw values are required.
`SNIPER_EDITION` Optional	Optional override of the auto-detected Sn1per edition.
`SNIPER_BIN` Optional	Optional absolute path to the sniper CLI. Detected automatically on standard installs.
`SNIPER_INSTALL_DIR` Optional	Optional Sn1per install directory. Read from the CLI or /usr/share/sniper by default.
`SNIPER_LOOT_BASE` Optional	Optional directory that contains the loot workspace tree. Defaults to the install directory's loot folder.
`SNIPER_SCAN_ENABLED` Optional	Set to false for a read-only deployment that never launches scans.

Details

Package	`[email protected]` (PYPI, stdio)
First published	17 Oct 2026
Last updated	17 Oct 2026
Registry name	`io.github.1N3/sn1per-mcp`

More security servers See all

Live status

Local install

Installed and run on your own machine, so there is no public endpoint to check.

Pair it with live search

Agents that use Sn1per MCP Server: pentest, recon and attack surface scanning often also need current facts. NestDaddy MCP gives your AI today's internet: web search, real-time breaking news and full page reading in one connector.

See NestDaddy MCP

For maintainers

[![NestDaddy MCP](https://nestdaddy.com/mcp/servers/io-github-1n3-sn1per-mcp/badge.svg)](https://nestdaddy.com/mcp/servers/io-github-1n3-sn1per-mcp)

Add the badge to your README. It turns green while your server passes our daily check. Listing details come from the official MCP registry; update them there.

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.