Web-recon-agent MCP Server

Web-recon-agent is an MCP integration. Owned-target web security assessment MCP server for authenticated, high-friction apps.

Packages and local setup

The published npm package is mcp-web-recon-agent, version 0.8.1. Its declared MCP transport is stdio.

The package declares MCP_TARGET_ALLOWLIST (required): Comma-separated hostnames allowed for scanning. Required.; MCP_OWNED_TARGETS: Comma-separated hostnames you explicitly own to unlock active and owned-aggressive scan modes.; MCP_JOB_STORE_PATH: Optional path for persisted job metadata. Defaults to mcp-jobs.json in the current working directory.; MCP_MAX_CONCURRENT: Optional maximum number of concurrent scan jobs. Defaults to 2.; MCP_CONFIG_PATH: Optional path to a JSON config file that overrides allowlist and concurrency settings..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository. This profile uses version 0.8.1 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related developer tools MCP servers for tools that cover the same kind of work.