io.github.operantlabs/operant-mcp

MCPcommunity
v1.0.1io.github.operantlabsUnknownUpdated 3mo agonpmGitHub

Security testing MCP server for penetration testing, forensics, and vulnerability assessment

[]( []( []( []( []( []( Security testing MCP server with 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. Add to your MCP config: — Test OR-based WHERE clause bypass — Test login form SQL injection — UNION-based data extraction — Boolean-based blind SQLi — Time-based blind SQLi — Read files via LOADFILE() — Test reflected XSS with 10 payloads —…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
3mo agoLast update
Package
Authorio.github.operantlabs
LicenseUnknown
Version1.0.1
Sourcemcp-registry
npmoperant-mcp
GitHuboperantlabs/operant-mcp
Trust Status
C
40/100Caution
✓Listed in Forge index+10/10
—Publisher identity verified+0/25
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/10
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓CVE scan · clean+30/30
—Static analysis · clean+0/20
→ Suspicious install scripts or obfuscated code detected
—npm provenance (Sigstore)+0/5
→ Publish from GitHub Actions with the --provenance flag
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface40 tools · 2 privileged
Security scan⚠ Warnings (2)v1.1.0 · 20d ago
CODEdist/tools/ssrf.jsjavascript-obfuscator artifact (_0x identifiers)
CODEdist/tools/xss.jseval of base64-decoded content
EvalsNone
IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

[]( []( []( []( []( []( Security testing MCP server with 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. Add to your MCP config: — Test OR-based WHERE clause bypass — Test login form SQL injection — UNION-based data extraction — Boolean-based blind SQLi — Time-based blind SQLi — Read files via LOAD_FILE() — Test reflected XSS with 10 payloads — Generate context-aware XSS payloads — Test OS command injection — Blind command injection via sleep…

Keywords
mcp