web-recon-agent
io.github.joepangallo/web-recon-agent · version 0.8.1
Community listing. Not installed or verified by cosmic-mcp. Read the source and its permissions before you run it.
Owned-target web security assessment MCP server for authenticated, high-friction apps.
https://github.com/joepangallo/web-recon-agentQuick facts
- Listing: Community
- Published Mar 25, 14:39 UTC
- Transport: stdio
- Package: npm
mcp-web-recon-agent0.8.1 - Listed by cosmic-mcp: Nov 9, 04:26 UTC
Details
- Repository: https://github.com/joepangallo/web-recon-agent
- npm: https://www.npmjs.com/package/mcp-web-recon-agent
- Needs settings:
MCP_TARGET_ALLOWLISTMCP_OWNED_TARGETSMCP_JOB_STORE_PATHMCP_MAX_CONCURRENTMCP_CONFIG_PATH
Setup snippets
Generated from the registry entry. cosmic-mcp has not run or reviewed this server; values in angle brackets are yours to fill in.
Run it locally (npm)
npx -y '[email protected]'Claude Desktop (claude_desktop_config.json)
{
"mcpServers": {
"web-recon-agent": {
"args": [
"-y",
"[email protected]"
],
"command": "npx",
"env": {
"MCP_CONFIG_PATH": "<your mcp config path>",
"MCP_JOB_STORE_PATH": "<your mcp job store path>",
"MCP_MAX_CONCURRENT": "<your mcp max concurrent>",
"MCP_OWNED_TARGETS": "<your mcp owned targets>",
"MCP_TARGET_ALLOWLIST": "<your mcp target allowlist>"
}
}
}
}Claude Code
claude mcp add 'web-recon-agent' -- npx -y '[email protected]'Cursor (.cursor/mcp.json)
{
"mcpServers": {
"web-recon-agent": {
"args": [
"-y",
"[email protected]"
],
"command": "npx",
"env": {
"MCP_CONFIG_PATH": "<your mcp config path>",
"MCP_JOB_STORE_PATH": "<your mcp job store path>",
"MCP_MAX_CONCURRENT": "<your mcp max concurrent>",
"MCP_OWNED_TARGETS": "<your mcp owned targets>",
"MCP_TARGET_ALLOWLIST": "<your mcp target allowlist>"
}
}
}
}VS Code (.vscode/mcp.json)
{
"servers": {
"web-recon-agent": {
"args": [
"-y",
"[email protected]"
],
"command": "npx",
"env": {
"MCP_CONFIG_PATH": "<your mcp config path>",
"MCP_JOB_STORE_PATH": "<your mcp job store path>",
"MCP_MAX_CONCURRENT": "<your mcp max concurrent>",
"MCP_OWNED_TARGETS": "<your mcp owned targets>",
"MCP_TARGET_ALLOWLIST": "<your mcp target allowlist>"
},
"type": "stdio"
}
}
}Related servers
- AgentTrust — Identity & Trust for A2A Agents Verified domain
Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner. - 13FLOW
Source-linked SEC 13F research, quality checks, watchlists and audit trails for agents. - 1Claw Vault
HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning. - 212medya Growth Check Verified domain
Audit a public website for B2B marketing readiness and AI search visibility. - 3ilm-mcp
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern. - 402shield
x402 payment security and pre-execution transaction risk screening for autonomous AI agents.