Operant Mcp
by operantlabscommunityv1.0.1
14
6
An MCP server that provides security testing and analysis tools for web application pentesting, network forensics, memory forensics, malware analysis, and cloud security assessment. It includes prompts for common security workflows and methods.
From the registry: Security testing MCP server for penetration testing, forensics, and vulnerability assessment
Install & configure
Install in your client
Paste into the AI you're chatting with — it will figure out the rest
Please install the `operant-mcp` MCP server into my current AI client (that's you).
Canonical MCP server config (stdio transport):
- command: `npx`
- args: ["-y","operant-mcp"]
Note: 51 security testing tools. Various CLI utilities required for specific modules: tshark (PCAP), dig/host (DNS), volatility (memory forensics), olevba/oledump (malware analysis), jq (cloud), git (secrets). curl needed for most tools.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.Note: 51 security testing tools. Various CLI utilities required for specific modules: tshark (PCAP), dig/host (DNS), volatility (memory forensics), olevba/oledump (malware analysis), jq (cloud), git (secrets). curl needed for most tools.
Tools (51)
sqli_where_bypass
Test OR-based WHERE clause bypass
sqli_login_bypass
Test login form SQL injection
sqli_union_extract
UNION-based data extraction
sqli_blind_boolean
Boolean-based blind SQLi
sqli_blind_time
Time-based blind SQLi
sqli_file_read
Read files via LOAD_FILE()
xss_reflected_test
Test reflected XSS with 10 payloads
xss_payload_generate
Generate context-aware XSS payloads
cmdi_test
Test OS command injection
cmdi_blind_detect
Blind command injection via sleep timing
path_traversal_test
Test directory traversal with encoding variants
ssrf_test
Test SSRF with localhost bypass variants
ssrf_cloud_metadata
Test cloud metadata access via SSRF
pcap_overview
Protocol hierarchy and endpoint stats
Packages
operant-mcp
npmv1.0.1transport: stdio
Details
- Language
- TypeScript
- License
- MIT
- Released
- Mar 25, 2026
- Last commit
- Apr 1, 2026
- Registry name
- io.github.operantlabs/operant-mcp