HackTricks MCP Server
Query HackTricks pentesting playbooks from Claude Code or Cursor while hardening APIs, reviewing auth flows, or preparing a security checklist before release.
Overview
HackTricks MCP Server is an MCP server for the Ship phase that searches and queries HackTricks pentesting documentation with quick lookup and section extraction inside your agent.
What is this MCP server?
- Search HackTricks corpus with quick lookup from the agent chat
- Pull specific sections for techniques, commands, and checklists without leaving the IDE
- stdio npm package hacktricks-mcp-server v1.3.4 for Claude Desktop and compatible MCP hosts
- Section extraction for focused answers instead of dumping whole pages
- Pairs with manual verification—you still run tools and scope tests ethically on systems you own
- Server version 1.3.4
- Transport: stdio via npm identifier hacktricks-mcp-server
Community signal: 7 GitHub stars.
What problem does it solve?
Security guidance is scattered across long wiki pages, so builders waste time tab-switching instead of keeping exploit-path context next to the code they are fixing.
Who is it for?
Indie developers doing authorized appsec review, CTF practice, or pre-launch hardening who want HackTricks on demand in Claude Code or Cursor.
Skip if: Teams that need managed pen-test reports, continuous CVE feeds, or scanning without reading primary sources.
What do I get? / Deliverables
After you register the stdio server, your agent can cite relevant HackTricks sections while you draft fixes, test plans, or review comments in one workflow.
- Agent-retrieved HackTricks sections tied to your current security question
- Faster research notes for reviews, hardening tasks, or learning paths
Recommended MCP Servers
Journey fit
Canonical shelf is Ship because solo builders reach for offensive-security reference material when they are validating exposure, running reviews, or closing gaps before customers touch production. Security subphase matches documentation lookup during threat modeling, privilege-escalation research, and remediation planning—not casual idea brainstorming.
How it compares
MCP documentation bridge for HackTricks, not a replacement for Burp, nuclei, or a full agent skill that runs audits end-to-end.
Common Questions / FAQ
Who is HackTricks MCP Server for?
It is for builders and security-curious solo devs who already use MCP-enabled agents and want HackTricks search without leaving the editor.
When should I use HackTricks MCP Server?
Use it during Ship security work—threat modeling, checklist drafting, or studying techniques for systems you are allowed to test.
How do I add HackTricks MCP Server to my agent?
Install the npm package hacktricks-mcp-server, add a stdio MCP entry pointing at that binary in Claude Code, Cursor, or Claude Desktop, then restart the host.