Mcpwner MCP Server

<h3><i>Beware the Badger</i></h3> Model Context Protocol server for autonomous security research

Local serverstdioPython

What is the Mcpwner MCP server?

The short version

MCPwner is an MCP server that gives your LLM agent a full offensive-security toolkit. It exposes 55+ containerized tools through a single MCP interface - SAST, SCA, secrets, IaC, reconnaissance, DAST, coverage-guided fuzzing, CodeQL (builtin and custom queries), a headless browser, an OOB callback server, a PoC-script sandbox with deterministic oracles, and a persistent findings ledger.

The tools it exposes

The server publishes 2 tools. What each one is for:

  • Prerequisites — The Prerequisites tool exposed by this server
  • Setup — 4. Verify services are running: bash docker compose ps

What it needs from you

System Requirements: - Docker Engine 20.10+ and Docker Compose 2.0+ - 8GB RAM minimum (16GB recommended for running multiple tools) - 20GB free disk space (security tool images are large) - Supported platforms: Linux, macOS, Windows (with WSL2) MCP Client: - Claude Desktop, Cursor, Kiro, or any MCP-compatible client

Getting it running

Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client. The configuration blocks on this page cover the common clients.

How it compares

Among the cloud and infrastructure options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Mcpwner's toolset — Prerequisites, Setup — is a fair guide to whether it matches your workflow. It is maintained by pigyon; worth a glance at recent repository activity before you build anything load-bearing on it.

This entry was verified against Mcpwner's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.

Things to watch

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Available tools

ToolWhat it does
PrerequisitesThe Prerequisites tool exposed by this server.
Setup4. **Verify services are running**: bash docker compose ps

How to install the Mcpwner MCP server

{
  "mcpServers": {
    "mcpwner": {
      "command": "docker",
      "args": ["exec", "-i", "mcpwner-server", "python", "src/server.py"],
      "env": {}
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

System Requirements: - Docker Engine 20.10+ and Docker Compose 2.0+ - 8GB RAM minimum (16GB recommended for running multiple tools) - 20GB free disk space (security tool images are large) - Supported platforms: Linux, macOS, Windows (with WSL2) MCP Client: - Claude Desktop, Cursor, Kiro, or any MCP-compatible client

Example prompts to try

  • Use Mcpwner to Prerequisites.
  • Use Mcpwner to Setup.

Frequently asked questions

It connects Mcpwner to MCP-compatible AI assistants such as Claude and Cursor, exposing 2 tools (Prerequisites, Setup) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Mcpwner directly.