MCP server

Web Recon Agent

io.github.joepangallo/web-recon-agent

Checked 26 Oct 2026, 08:31 UTC · Still published on its registry; checked against OSV.dev; never run by us

Owned-target web security assessment MCP server for authenticated, high-friction apps.

Runs on your computer

Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add web-recon-agent --env MCP_TARGET_ALLOWLIST=YOUR_VALUE -- npx -y mcp-web-recon-agent@0.8.1

Claude Desktop

{"mcpServers":{"web-recon-agent":{"command":"npx","args":["-y","mcp-web-recon-agent@0.8.1"],"env":{"MCP_TARGET_ALLOWLIST":"YOUR_VALUE"}}}}

Codex (config.toml)

[mcp_servers.web-recon-agent]
command = "npx"
args = ["-y","mcp-web-recon-agent@0.8.1"]
env = { MCP_TARGET_ALLOWLIST = "YOUR_VALUE" }

Gemini CLI

{"mcpServers":{"web-recon-agent":{"command":"npx","args":["-y","mcp-web-recon-agent@0.8.1"],"env":{"MCP_TARGET_ALLOWLIST":"YOUR_VALUE"}}}}

Cursor

{"mcpServers":{"web-recon-agent":{"command":"npx","args":["-y","mcp-web-recon-agent@0.8.1"],"env":{"MCP_TARGET_ALLOWLIST":"YOUR_VALUE"}}}}

VS Code

{"servers":{"web-recon-agent":{"type":"stdio","command":"npx","args":["-y","mcp-web-recon-agent@0.8.1"],"env":{"MCP_TARGET_ALLOWLIST":"YOUR_VALUE"}}}}

Runs on your computer with your permissions: check the package and its source before installing. Replace YOUR_VALUE with your own MCP_TARGET_ALLOWLIST.

Browse

Related MCP servers

BlackVeil DNS & Email Security Scanner
DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
Cognita
Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
ContrastAPI
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
AgentDiet Domain OSINT, TLS Certificate & Security Headers Recon
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
AgentsToolsHub
156 paid-per-call JSON APIs for AI agents over x402: calculators, live data, crypto, security, dev.
SignalTender B2B, GovCon & LegalTech MCP Server
B2B, GovCon & LegalTech MCP server for live RFPs, contract parsing, compliance & proposal tools.
SiteGuardian
EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.
Scry
Free IPv4 lookups against a distributed attacker-observation corpus.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.joepangallo/web-recon-agent.svg)](https://aptlynx.net/servers/io.github.joepangallo/web-recon-agent)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents