Sn1per MCP Server: pentest, recon and attack surface scanning

{
  "name": "io.github.1N3/sn1per-mcp",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "com.sn1persecurity": {
        "controls": "Mandatory target scope, local JSONL audit log, secrets redaction; intrusive modes and destructive tools are off by default.",
        "editions": [
          "ce",
          "se",
          "pro",
          "enterprise"
        ],
        "platform": "linux",
        "transport": "stdio only",
        "intendedUse": "Authorized security testing only: systems you own or are explicitly permitted in writing to test.",
        "documentation": "https://github.com/1N3/sn1per-mcp#readme",
        "securityPolicy": "https://github.com/1N3/sn1per-mcp/security/policy",
        "hostRequirements": "Runs beside a local Sn1per install (CE 9.x or the 11.x engine). Scan and delete tools need root through a passwordless sudo rule for the Sn1per CLI; read tools run unprivileged."
      }
    }
  },
  "icons": [
    {
      "src": "https://raw.githubusercontent.com/1N3/sn1per-mcp/v0.9.0/assets/sn1per-mcp-256.png",
      "sizes": [
        "256x256"
      ],
      "mimeType": "image/png"
    }
  ],
  "title": "Sn1per MCP Server: pentest, recon and attack surface scanning",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "0.9.0",
  "packages": [
    {
      "version": "0.9.0",
      "transport": {
        "type": "stdio"
      },
      "identifier": "sn1per-mcp",
      "runtimeHint": "uvx",
      "registryType": "pypi",
      "registryBaseUrl": "https://pypi.org",
      "environmentVariables": [
        {
          "name": "SNIPER_MCP_SCOPE",
          "format": "string",
          "description": "Comma-separated domains, IPs and CIDR ranges you are authorized to test (prefix ! to exclude). Scans outside it are refused.",
          "placeholder": "app.example,192.0.2.0/24"
        },
        {
          "name": "SNIPER_MCP_SCOPE_FILE",
          "format": "filepath",
          "description": "Optional absolute path to a scope file with one or more entries per line and # comments."
        },
        {
          "name": "SNIPER_MCP_AUTHORIZATION_REF",
          "format": "string",
          "description": "Optional authorization reference, such as a statement-of-work or ticket id, recorded in the audit log."
        },
        {
          "name": "SNIPER_MCP_ALLOW_INTRUSIVE",
          "format": "boolean",
          "default": "false",
          "description": "Set to true to offer scan modes that run brute force, exploitation or injection testing. Off by default."
        },
        {
          "name": "SNIPER_MCP_ENABLE_DESTRUCTIVE",
          "format": "boolean",
          "default": "false",
          "description": "Set to true to add the workspace delete and export tools; they ask the human to confirm. Off by default."
        },
        {
          "name": "SNIPER_MCP_REDACT",
          "format": "boolean",
          "default": "true",
          "description": "Redaction of secrets in results. On by default; turn off only with a local model when raw values are required."
        },
        {
          "name": "SNIPER_EDITION",
          "format": "string",
          "choices": [
            "auto",
            "ce",
            "se",
            "pro",
            "enterprise"
          ],
          "default": "auto",
          "description": "Optional override of the auto-detected Sn1per edition."
        },
        {
          "name": "SNIPER_BIN",
          "format": "filepath",
          "description": "Optional absolute path to the sniper CLI. Detected automatically on standard installs.",
          "placeholder": "/usr/share/sniper/sniper"
        },
        {
          "name": "SNIPER_INSTALL_DIR",
          "format": "filepath",
          "description": "Optional Sn1per install directory. Read from the CLI or /usr/share/sniper by default.",
          "placeholder": "/usr/share/sniper"
        },
        {
          "name": "SNIPER_LOOT_BASE",
          "format": "filepath",
          "description": "Optional directory that contains the loot workspace tree. Defaults to the install directory's loot folder.",
          "placeholder": "/usr/share/sniper/loot"
        },
        {
          "name": "SNIPER_SCAN_ENABLED",
          "format": "boolean",
          "default": "true",
          "description": "Set to false for a read-only deployment that never launches scans."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/1N3/sn1per-mcp",
    "source": "github"
  },
  "websiteUrl": "https://github.com/1N3/sn1per-mcp#readme",
  "description": "Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings."
}