MCP Server

io.github.joepangallo/web-recon-agent MCP Server

Name: io.github.joepangallo/web-recon-agent MCP Server
Author: io.github.joepangallo

io.github.joepangallo/web-recon-agent

Repository Registry

What is the io.github.joepangallo/web-recon-agent MCP server?

Owned-target web security assessment MCP server for authenticated, high-friction apps.

How to install io.github.joepangallo/web-recon-agent

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

MCP_TARGET_ALLOWLIST
required
Comma-separated hostnames allowed for scanning. Required.
MCP_OWNED_TARGETS
Comma-separated hostnames you explicitly own to unlock active and owned-aggressive scan modes.
MCP_JOB_STORE_PATH
Optional path for persisted job metadata. Defaults to mcp-jobs.json in the current working directory.
MCP_MAX_CONCURRENT
Optional maximum number of concurrent scan jobs. Defaults to 2.
MCP_CONFIG_PATH
Optional path to a JSON config file that overrides allowlist and concurrency settings.

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "web-recon-agent": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-web-recon-agent"
      ],
      "env": {
        "MCP_TARGET_ALLOWLIST": "<YOUR_MCP_TARGET_ALLOWLIST>",
        "MCP_OWNED_TARGETS": "<YOUR_MCP_OWNED_TARGETS>",
        "MCP_JOB_STORE_PATH": "<YOUR_MCP_JOB_STORE_PATH>",
        "MCP_MAX_CONCURRENT": "<YOUR_MCP_MAX_CONCURRENT>",
        "MCP_CONFIG_PATH": "<YOUR_MCP_CONFIG_PATH>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "web-recon-agent": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-web-recon-agent"
      ],
      "env": {
        "MCP_TARGET_ALLOWLIST": "<YOUR_MCP_TARGET_ALLOWLIST>",
        "MCP_OWNED_TARGETS": "<YOUR_MCP_OWNED_TARGETS>",
        "MCP_JOB_STORE_PATH": "<YOUR_MCP_JOB_STORE_PATH>",
        "MCP_MAX_CONCURRENT": "<YOUR_MCP_MAX_CONCURRENT>",
        "MCP_CONFIG_PATH": "<YOUR_MCP_CONFIG_PATH>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "web-recon-agent": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-web-recon-agent"
      ],
      "env": {
        "MCP_TARGET_ALLOWLIST": "<YOUR_MCP_TARGET_ALLOWLIST>",
        "MCP_OWNED_TARGETS": "<YOUR_MCP_OWNED_TARGETS>",
        "MCP_JOB_STORE_PATH": "<YOUR_MCP_JOB_STORE_PATH>",
        "MCP_MAX_CONCURRENT": "<YOUR_MCP_MAX_CONCURRENT>",
        "MCP_CONFIG_PATH": "<YOUR_MCP_CONFIG_PATH>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "web-recon-agent": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mcp-web-recon-agent"
      ],
      "env": {
        "MCP_TARGET_ALLOWLIST": "<YOUR_MCP_TARGET_ALLOWLIST>",
        "MCP_OWNED_TARGETS": "<YOUR_MCP_OWNED_TARGETS>",
        "MCP_JOB_STORE_PATH": "<YOUR_MCP_JOB_STORE_PATH>",
        "MCP_MAX_CONCURRENT": "<YOUR_MCP_MAX_CONCURRENT>",
        "MCP_CONFIG_PATH": "<YOUR_MCP_CONFIG_PATH>"
      }
    }
  }
}

Claude Code

claude mcp add web-recon-agent --env MCP_TARGET_ALLOWLIST=<YOUR_MCP_TARGET_ALLOWLIST> --env MCP_OWNED_TARGETS=<YOUR_MCP_OWNED_TARGETS> --env MCP_JOB_STORE_PATH=<YOUR_MCP_JOB_STORE_PATH> --env MCP_MAX_CONCURRENT=<YOUR_MCP_MAX_CONCURRENT> --env MCP_CONFIG_PATH=<YOUR_MCP_CONFIG_PATH> -- npx -y mcp-web-recon-agent