offsec-mcp

Purpose: Giving AI agents a controlled interface for authorized reconnaissance and offensive-security workflows.

Inferred · not functionally tested

Audience: security researchers and bug bounty testers

Inferred · not functionally tested

Functions: agents, data_extraction

Inferred · not functionally tested

Interfaces: API: unknown · MCP: indicated (inferred, not tested) · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)

Recorded constraints: pricing: open_source · license: MIT · platforms: CLI · deployment: cli, self_hosted

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: pypi.org · github.com. These links do not verify the individual claims.

In the Penetration testing & red teaming space, offsec-mcp takes a focused approach. Inferred · not functionally tested: It focuses on giving AI agents a controlled interface for authorized reconnaissance and offensive-security workflows. Inferred · not functionally tested: It is built as an open-source project for security researchers and bug bounty testers. Basis unknown · not verified: The project is open source (MIT). Basis unknown · not verified: It ships for the command line, and it can be self-hosted.

nadirzhon builds and maintains offsec-mcp, and it first shipped in 2026. Development happens publicly on GitHub with 8 commits in the last 90 days. Inferred · not functionally tested: Among its 6 catalogued features are reconnaissance, CVE intelligence, and javaScript analysis. Basis unknown · not verified: Catalogued interfaces include an MCP server.

Summary written by a language model from the project’s public pages.