Back to MCP Servers
🧩

Owned-target web security assessment MCP server for authenticated, high-friction apps.

To add web-recon-agent to Claude, run the install command below or copy the ready-made config for Claude Code, Claude Desktop, Cursor and VS Code further down. Restart your client after adding it and its tools show up in your next conversation. It declares 5 environment variables, listed below.

DevTools

Install

npx -y mcp-web-recon-agent@0.8.1

Environment variables

MCP_TARGET_ALLOWLISTSet in your MCP config
MCP_OWNED_TARGETSSet in your MCP config
MCP_JOB_STORE_PATHSet in your MCP config
MCP_MAX_CONCURRENTSet in your MCP config
MCP_CONFIG_PATHSet in your MCP config

Set only if the maker requires them; this listing does not flag any of them as required.

Install with your client

Terminal
claude mcp add web-recon-agent --env MCP_TARGET_ALLOWLIST=<YOUR_MCP_TARGET_ALLOWLIST> --env MCP_OWNED_TARGETS=<YOUR_MCP_OWNED_TARGETS> --env MCP_JOB_STORE_PATH=<YOUR_MCP_JOB_STORE_PATH> --env MCP_MAX_CONCURRENT=<YOUR_MCP_MAX_CONCURRENT> --env MCP_CONFIG_PATH=<YOUR_MCP_CONFIG_PATH> -- npx -y mcp-web-recon-agent@0.8.1

Run this in a terminal to add the server to Claude Code.

What this does

web-recon-agent exposes a set of tools to Claude over the Model Context Protocol. After you add it to claude_desktop_config.json (snippet above) and restart Claude Desktop, those tools become callable inside any conversation.

Requirements

This server declares the following environment variables. Set only the ones the maker requires for your setup; this listing does not flag any of them as required:

MCP_TARGET_ALLOWLIST
MCP_OWNED_TARGETS
MCP_JOB_STORE_PATH
MCP_MAX_CONCURRENT
MCP_CONFIG_PATH

Set these via the env object in your MCP config (see claude_desktop_config.json snippet above).

Frequently asked questions

How do I install web-recon-agent?

Run the Claude Code command in the install section to add web-recon-agent to Claude Code, or copy the ready-made config for your client from the install section on this page. Restart your client afterwards and the tools appear in your next conversation.

Which clients work with web-recon-agent?

This page carries setup and config for Claude Code, Claude Desktop, Cursor and VS Code. Any other MCP client that accepts a standard server config can connect to web-recon-agent as well.

Does web-recon-agent need an API key?

This listing does not flag an API key as required. The server can use these environment variables: MCP_TARGET_ALLOWLIST, MCP_OWNED_TARGETS, MCP_JOB_STORE_PATH, MCP_MAX_CONCURRENT, MCP_CONFIG_PATH; the maker's docs say which of them your setup needs. They go in the env block of your MCP config.

Imported from the Official MCP Registry. The details above come from the registry entry; the maker can claim this listing to correct them, add docs, and see its traffic.

Is this your MCP server?

Claim this listing to see its traffic, fix details yourself, and skip the review queue on future updates.

Listed on clauderules.net

Add this badge to your README

Show visitors this server is listed in the ClaudeRules directory. The badge links straight to this listing.

Markdown
[![Listed on clauderules.net](https://clauderules.net/api/badge/io-github-joepangallo-web-recon-agent)](https://clauderules.net/mcp/io-github-joepangallo-web-recon-agent)
HTML
<a href="https://clauderules.net/mcp/io-github-joepangallo-web-recon-agent" target="_blank" rel="noopener noreferrer"><img src="https://clauderules.net/api/badge/io-github-joepangallo-web-recon-agent" alt="Listed on clauderules.net" /></a>