How do I install the operant mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

SSyncDev

Start a project

Operant MCP Server

Security testing MCP server with 51 tools for penetration testing, forensics, and vulnerability assessment

Local serverstdio

What is the Operant MCP Server?

Security testing MCP server with 51 tools for penetration testing, forensics, and vulnerability assessment

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
sqli_where_bypass	Test OR-based WHERE clause bypass
sqli_login_bypass	Test login form SQL injection
sqli_union_extract	UNION-based data extraction
sqli_blind_boolean	Boolean-based blind SQLi
sqli_blind_time	Time-based blind SQLi
sqli_file_read	Read files via LOAD_FILE()
xss_reflected_test	Test reflected XSS with 10 payloads
xss_payload_generate	Generate context-aware XSS payloads
cmdi_test	Test OS command injection
cmdi_blind_detect	Blind command injection via sleep timing
path_traversal_test	Test directory traversal with encoding variants
ssrf_test	Test SSRF with localhost bypass variants
ssrf_cloud_metadata	Test cloud metadata access via SSRF
pcap_overview	Protocol hierarchy and endpoint stats
pcap_extract_credentials	Extract FTP/HTTP/SMTP credentials
pcap_dns_analysis	DNS query analysis
pcap_http_objects	Export HTTP objects
pcap_detect_scan	Detect port scanning
pcap_follow_stream	Follow TCP/UDP streams
pcap_tls_analysis	TLS/SNI analysis
pcap_llmnr_ntlm	Detect LLMNR/NTLM attacks
recon_quick	Quick recon (robots.txt, headers, common dirs)
recon_dns	Full DNS enumeration
recon_vhost	Virtual host discovery
recon_tls_sans	Extract SANs from TLS certificates
recon_directory_bruteforce	Directory brute-force
recon_git_secrets	Search git repos for secrets
recon_s3_bucket	Test S3 bucket permissions
volatility_linux	Linux memory analysis (Volatility 2)
volatility_windows	Windows memory analysis (Volatility 3)
memory_detect_rootkit	Linux rootkit detection
maldoc_analyze	Full OLE document analysis pipeline
maldoc_extract_macros	Extract VBA macros
cloudtrail_analyze	CloudTrail log analysis
cloudtrail_find_anomalies	Detect anomalous CloudTrail events
auth_csrf_extract	Extract CSRF tokens
auth_bruteforce	Username enumeration + credential brute-force
auth_cookie_tamper	Cookie tampering test
idor_test	Test for IDOR vulnerabilities
role_escalation_test	Test privilege escalation
price_manipulation_test	Test price/quantity manipulation
coupon_abuse_test	Test coupon stacking/reuse
clickjacking_test	Test X-Frame-Options/CSP
frame_buster_bypass	Test frame-busting bypass
cors_test	Test CORS misconfigurations
file_upload_test	Test file upload bypasses
nosqli_auth_bypass	MongoDB auth bypass
nosqli_detect	NoSQL injection detection
deserialization_test	Test insecure deserialization
graphql_introspect	Full schema introspection
graphql_find_hidden	Discover hidden fields

How to install the Operant MCP Server

{
  "mcpServers": {
    "operant": {
      "command": "npx",
      "args": [
        "-y",
        "operant-mcp"
      ]
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Frequently asked questions

Security testing MCP server with 51 tools for penetration testing, forensics, and vulnerability assessment Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.