Intruder MCP
Access Intruder to identify, understand and fix security vulnerabilities in your infrastructure.
Install
The installation steps are in the documentation below. Documentation
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Intruder MCP
Let MCP clients like Claude and Cursor control Intruder. For more information and sample use cases, please see our blog post.
Installation
There are two ways to use the MCP server:
- Locally on your machine with Python
- In a Docker container
All of these methods require you to provide an Intruder API key. To generate a key, see the documentation.
Running Locally
Install uv if it isn't already present, and then clone this repository and run the following from the root directory:
uv venv
uv pip install -e .
Then, add the following to your MCP client configuration, making sure to fill in your API key, and update the path to where you have cloned this repository:
{
"mcpServers": {
"intruder": {
"command": "uv",
"args": [
"--directory",
"path/to/intruder-mcp/intruder_mcp",
"run",
"server.py"
],
"env": {
"INTRUDER_API_KEY": "your-api-key"
}
}
}
}
Running in a Container
Add the following to your MCP client configuration, making sure to fill in your API key:
{
"mcpServers": {
"intruder": {
"command": "docker",
"args": [
"container",
"run",
"--interactive",
"--rm",
"--init",
"--env",
"INTRUDER_API_KEY=<your-api-key>",
"ghcr.io/intruder-io/intruder-mcp"
]
}
}
}
Frequently asked questions
What is Intruder MCP?
Access Intruder to identify, understand and fix security vulnerabilities in your infrastructure.
How do I install Intruder MCP?
Follow the installation steps in its documentation, shown on this page and in its repository.
Is Intruder MCP open source?
Yes. Its code is on GitHub under the BSD-3-Clause license.
Who maintains Intruder MCP?
It is published by intruder-io. AI.tn lists it but does not maintain or endorse it.
From the community awesome-mcp-servers lists and the project's GitHub repository. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.