Skip to content

Home

███╗   ███╗ ██████╗██████╗ ██╗    ██╗███╗   ██╗
████╗ ████║██╔════╝██╔══██╗██║    ██║████╗  ██║
██╔████╔██║██║     ██████╔╝██║ █╗ ██║██╔██╗ ██║
██║╚██╔╝██║██║     ██╔═══╝ ██║███╗██║██║╚██╗██║
██║ ╚═╝ ██║╚██████╗██║     ╚███╔███╔╝██║ ╚████║
╚═╝     ╚═╝ ╚═════╝╚═╝      ╚══╝╚══╝ ╚═╝  ╚═══╝

MCP server recon & exploitation toolkit

Connect → Enumerate → Call → Proxy → Inject.
A fast, aesthetic CLI for red-teaming Model Context Protocol servers.

python 3.10+ built with fastmcp ui rich managed by uv research only

Get started View on GitHub

Research & authorized testing only

Use mcpwn only against systems you own or have explicit written permission to test. Read the Disclaimer before you run anything.

What it does

Point mcpwn at an MCP server and it connects over stdio / HTTP / SSE, enumerates everything the server exposes, and lets you call tools, render prompts and read resources — then takes it further: route every request through an intercepting proxy (Burp Suite) or hand a tool's arguments to sqlmap for SQL-injection testing.

Capabilities

  • 🔌 Multi-transport

    stdio commands, Streamable HTTP and legacy SSE — auto-detected from the target, or forced with -t.

  • 🔍 Full recon

    Tools, prompts, resources and resource templates, rendered in clean tables by enum.

  • 🛠 Drive it

    Call tools, render prompts, read resources and inspect parameter schemas.

  • 🐚 Interactive shell

    One persistent connection — ideal for stateful servers and fast, exploratory recon.

  • 📡 Proxy-aware

    Funnel all HTTP/SSE traffic through Burp with one flag; TLS verification is relaxed automatically.

  • 💉 sqlmap bridge

    Auto-build a raw injectable request (with a live session id) and hand it straight to sqlmap.

Built with fastmcp · rich · typer · httpx.

Where to next

  • Installation — get the mcpwn command in under a minute.
  • Quickstart — drive the bundled vulnerable server.
  • Commands — full reference for every subcommand.
  • Guides — Burp routing and sqlmap walkthroughs.