Hexstrike Ai

0x4m4/hexstrike-aiMIT⭐ 7,412🔧 151 tools

D5.7SpiderScore (registry)

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Use cases:vuln-scanninganalytics-bipentestweb-scrape
⚠ Hard constraint applied: critical issue caps D
Decision
Allow with Risk
Confidence
90%

Hexstrike Ai has risks — usable with isolation (5.7/10, 2 critical, 0 high).

Recommended Actions

  • high
    Run In Container
    2 critical vulnerabilities require isolation
  • high
    Limit Permissions
    Restrict tool access to minimum required scope

Do Not

  • ✗running in production without container isolation
Risk Flags (2)
  • critical
    command_injection×2
    Command injection risk — subprocess called with shell=True and non-literal command
  • low
    no_input_validation×18
    MCP tool handler accepts raw string input without validation
How This Was Decided
  • positivew=0.5Overall quality score = 5.7/10 (grade D)
  • negativew=0.82 critical security issue(s) detected
  • negativew=0.3Tool description clarity score = 2.2/10
Source: SpiderRating automated security scanUpdated: 2026-03-13Protocol: v1.1

Description Quality

Composite: 2.2 / 10

3-Layer Breakdown

Description (38%)
2.2
Security (34%)
7.8
Metadata (28%)
7.8

Description Dimensions

Intent Clarity
3.5
Permission Scope
0.1
Side Effects
2.2
Capability Disclosure
3.1
Operational Boundaries
2.6

Security Analysis

7.8
Score
2
Critical
0
High
10
Medium
110
Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

2 CRITICAL110 LOW10 MEDIUM

Metadata Health

Provenance (40%)
9.0
Maintenance (35%)
5.0
Popularity (25%)
10.0

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/0x4m4__hexstrike-ai.svg)](https://spiderrating.com/servers/0x4m4/hexstrike-ai)
🛡️

Protect Your Agents

Get a free API key. Every MCP tool call checked against 15,923 rated servers in real-time.

Get Free API Key →
📊

Monitor All Your Servers

Dashboard for your entire MCP portfolio. Score tracking, alerts, and compliance reports.

Start Free Trial →
⭐

Scan Locally (Open Source)

Run SpiderShield on your own machine. 46+ security rules, zero data leaves your system.

Star on GitHub →

Similar Servers

Rank Trackeraaron-he-zhu/rank-tracker
7.1B
Flight Trackerxenofex7/flight-tracker
7.2B
Keyword Researchaaron-he-zhu/keyword-research
6.9C
Market Researchivangdavila/market-research
6.9C
Competitor Analysisaaron-he-zhu/competitor-analysis
6.9C