HackTricks MCP Server - install, status & alternatives [2026]

01 · Install HackTricks MCP Server

Claude Code

claude mcp add xplo8e-hacktricks-mcp-server -- npx -y hacktricks-mcp-server

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "xplo8e-hacktricks-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "hacktricks-mcp-server"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package hacktricks-mcp-server - unscoped; check the name against the project README before installing

registry namespace io.github.Xplo8E is GitHub-verified and matches the repo owner

03 · What HackTricks MCP Server can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can search through HackTricks documentation. Returns results GROUPED BY FILE with match count, page title, and relevant section headers, and get the table of contents of a page (all section headers). Use this BEFORE reading full pages to understand structure.

The 3 tools it gives your agent

Extracted from the project's README - what HackTricks MCP Server lets an agent do.

hacktricks_quick_lookup: - ⚡ One-shot exploitation lookup. Searches, finds best page, and returns exploitation sections + code blocks in one call.
search_hacktricks: - Search through HackTricks documentation. Returns results GROUPED BY FILE with match count, page title, and relevant section headers.
get_hacktricks_outline: - Get the table of contents of a page (all section headers). Use this BEFORE reading full pages to understand structure.

04 · Who maintains HackTricks MCP Server

HackTricks MCP Server is maintained by xplo8e. It's the only MCP server we track from this author; the repo dates to Dec 2025.

05 · Facts

repository: github.com/xplo8e/hacktricks-mcp-server
website: https://github.com/Xplo8E/hacktricks-mcp-server
category: security - ranked #101 of 182 actively-maintained security servers as of 2026-08-25.
registry: io.github.Xplo8E/hacktricks-mcp-server (active, first published 2025-12-27 · 3 versions)
packages: npm:hacktricks-mcp-server

06 · HackTricks MCP Server FAQ

Is HackTricks MCP Server still maintained?

Yes - as of 2026-08-25, its last commit was 2026-03-28. We re-verify nightly.

What can HackTricks MCP Server do?

With this server connected, an agent can search through HackTricks documentation. Returns results GROUPED BY FILE with match count, page title, and relevant section headers, and get the table of contents of a page (all section headers). Use this BEFORE reading full pages to understand structure.

How do I install HackTricks MCP Server?

Run `npx -y hacktricks-mcp-server`. You can also paste the ready-made client config above.

Does HackTricks MCP Server run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to HackTricks MCP Server

Alternatives to HackTricks MCP Server

Maintained security servers if HackTricks MCP Server isn't the fit.

Pairs well with

Servers that cover what HackTricks MCP Server doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Kdbx · Webcheck · Pyobfus MCP · Code Factory · VMware NSX Security

More JavaScript MCP servers · Xquik MCP Server · Wiff · OpenClaw MCP Ecosystem · Time MCP · Yolfi Payments MCP · see all