Owned-target web security assessment MCP server for authenticated, high-friction apps.
npx -y mcp-web-recon-agent{
"MCP_TARGET_ALLOWLIST": "YOUR_VALUE_HERE",
"MCP_OWNED_TARGETS": "YOUR_VALUE_HERE",
"MCP_JOB_STORE_PATH": "YOUR_VALUE_HERE",
"MCP_MAX_CONCURRENT": "YOUR_VALUE_HERE",
"MCP_CONFIG_PATH": "YOUR_VALUE_HERE"
}Add this server entry to the mcpServers object in your Claude Desktop config, then restart the app.
{
"mcpServers": {
"io-github-joepangallo-web-recon-agent": {
"command": "npx",
"args": [
"-y",
"mcp-web-recon-agent"
],
"env": {
"MCP_TARGET_ALLOWLIST": "YOUR_VALUE_HERE",
"MCP_OWNED_TARGETS": "YOUR_VALUE_HERE",
"MCP_JOB_STORE_PATH": "YOUR_VALUE_HERE",
"MCP_MAX_CONCURRENT": "YOUR_VALUE_HERE",
"MCP_CONFIG_PATH": "YOUR_VALUE_HERE"
}
}
}
}~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonNo remote HTTP endpoint is advertised. Use the package or stdio setup shown in Install.
web-recon-agent is an MCP server for Owned-target web security assessment MCP server for authenticated, high-friction apps.. It supports STDIO transport.
Use the generated config in Install. This server runs with npx -y mcp-web-recon-agent; add any required environment variables before starting your client.
Choose the Claude Desktop tab in Install and copy the config for npx -y mcp-web-recon-agent. Add required environment variables before starting Claude Desktop.
Choose the Claude Code tab in Install and copy the config for npx -y mcp-web-recon-agent. Add required environment variables before starting Claude Code.
Choose the Codex tab in Install and copy the config for npx -y mcp-web-recon-agent. Add required environment variables before starting Codex.
Choose the Cursor or VS Code tab in Install and copy the config for npx -y mcp-web-recon-agent. Add required environment variables before starting Cursor or VS Code.
web-recon-agent uses STDIO transport. Use the package or command config in Install.
web-recon-agent inventory is listed when the MCP endpoint exposes tools, resources, or prompts. Some servers require auth first.
web-recon-agent is marked with Auth required by registry metadata auth. You may need provider login, an API key, a bearer token, or a session header.
| Package | Registry | Version | Inputs |
|---|---|---|---|
mcp-web-recon-agentstdio | npm | 0.8.1 | Env: MCP_TARGET_ALLOWLIST required Env: MCP_OWNED_TARGETS Env: MCP_JOB_STORE_PATH Env: MCP_MAX_CONCURRENT Env: MCP_CONFIG_PATH |