MCP server exposing full recon-ng OSINT framework functionality
SaferSkills independently audited mcp-recon-ng (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server exposing full recon-ng OSINT framework functionality to LLMs.
mcp-name: io.github.daedalus/mcp-recon-ng
pip install mcp-recon-ngRequires recon-ng to be installed separately:
pip install recon-ngmcp-recon-ngAdd to your MCP client config:
{
"mcpServers": {
"recon-ng": {
"command": "mcp-recon-ng",
"env": {}
}
}
}workspace_list() - List all workspacesworkspace_create(name) - Create a new workspaceworkspace_switch(name) - Switch to a workspaceworkspace_delete(name) - Delete a workspacemodule_list(category) - List available modulesmodule_load(module_path) - Load a modulemodule_unload() - Unload current modulemodule_options_list() - List module optionsmodule_options_set(key, value) - Set module optionmodule_run() - Run loaded modulemarketplace_search(query) - Search marketplacemarketplace_install(module_path) - Install modulemarketplace_remove(module_path) - Remove moduledb_query(table, where) - Query databasedb_insert(table, data) - Insert recorddb_delete(table, where) - Delete recordsrun_command(command) - Execute recon-ng commandget_info() - Get system informationfrom mcp_recon_ng import workspace_create, module_load, module_run
# Create a new workspace
workspace_create("osint_project")
# Load a module
module_load("recon/domains-whois/whois_miner")
# Set module options
module_options_set("SOURCE", "example.com")
# Run the module
result = module_run()git clone https://github.com/daedalus/mcp-recon-ng.git
cd mcp-recon-ng
pip install -e ".[test]"
# run tests
pytest
# format
ruff format src/ tests/
# lint
ruff check src/ tests/
# type check
mypy src/~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.