HackTricks MCP Server

Install

npx -y [email protected]

Client fit

Inferred for Cursor, Claude, Codex. Basis: stdio. This is not a certification from those products.

Transports: stdio.

Links

• Repository
• Project site
• npm package hacktricks-mcp-server
• Registry record

SearchDocs

Audit report

Tested by AddonAudit.

Sandbox handshake completed, with warnings: install scripts present; not active within 180 days.

Automated smoke test, not a security guarantee.

Version

1.3.4

Audited

24 Oct 2026

Package

npm hacktricks-mcp-server

Advisories

0 critical, 0 high, 0 medium, 0 low

Time to ready

183 ms

Network

Disabled

• Pass Version. Pinned npm [email protected]
• Pass Known vulnerabilities. No critical, high, or medium advisories were returned.
• Pass License. MIT
• Warn Install scripts. Install-time scripts: postinstall
• Pass Credential patterns. No credential patterns in the published artifact.
• Pass Package size. 11.3 KB
• Warn Maintainer activity. Last activity was 300 days ago.
• Pass Sandbox. MCP handshake completed. 7 tools listed.

Tools

• search_hacktricks Search HackTricks for pentesting techniques, exploits, and security info. Returns results GROUPED BY FILE with: page title, match count, relevant sections, and top matches. WORKFLOW: search → get_hacktricks_outline (see structure) → get_hac
• get_hacktricks_page Get FULL page content. ⚠️ EXPENSIVE: Pages average 3000-15000 tokens. PREFER: get_hacktricks_section for specific topics, get_hacktricks_cheatsheet for just commands. Only use this when you need the complete page or multiple sections.
• get_hacktricks_outline Get TABLE OF CONTENTS (all section headers) of a page. Returns ~20-50 lines showing page structure. Use this FIRST after search to: (1) verify page is relevant, (2) find exact section names for get_hacktricks_section. Cost: ~100 tokens vs 3
• get_hacktricks_section Extract ONE SECTION from a page. MOST EFFICIENT way to read content. Typical sections: 'Exploitation', 'Enumeration', 'Prevention', 'Example', 'Payload', 'PoC', 'Bypass'. Use get_hacktricks_outline first to see exact section names. Returns
• get_hacktricks_cheatsheet Extract ALL CODE BLOCKS from a page (commands, payloads, scripts, one-liners). Skips explanatory text. Perfect for: 'give me the exploit command', 'show me the payload', 'what's the syntax'. Returns code with language tags (bash, python, et
• list_hacktricks_categories Browse HackTricks structure. Without params: list all categories. With category: show all pages in that category. Use when: (1) unsure which category to search, (2) want to explore what's available, (3) need exact file paths.
• hacktricks_quick_lookup ⚡ ONE-SHOT exploitation lookup. Searches, finds best page, and returns exploitation sections + code blocks. Use for: 'how do I exploit X', 'give me X payload', 'X attack technique'. Handles aliases (sqli→SQL injection, xss→Cross-site script

HackTricks MCP Server v1.3.0 running on stdio

Raw audit JSON

Metadata checks

• Repository activity: Quiet, archived, or older than 180 days
• License: Recognized SPDX id
• Metadata quality: High

Score 85 uses public metadata only. It is separate from the audit tier. Payment never changes a score. How listings are checked.