---
bezeichner: "io.github.joepangallo/web-recon-agent"
art: "mcp_server"
slug: "io-github-joepangallo-web-recon-agent"
paketkoordinate: "npm:mcp-web-recon-agent"
status: "aktiv"
homepage: "https://github.com/joepangallo/web-recon-agent"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.joepangallo"
registerseite: "https://tracevero.com/mcp/io-github-joepangallo-web-recon-agent"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
einsatzgebiet: "sicherheit"
roh_beschreibung: "Owned-target web security assessment MCP server for authenticated, high-friction apps."
version: "0.8.1"
roh_umgebungsvariablen: "MCP_TARGET_ALLOWLIST, MCP_OWNED_TARGETS, MCP_JOB_STORE_PATH, MCP_MAX_CONCURRENT, MCP_CONFIG_PATH"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/joepangallo/web-recon-agent"
roh_paketquellen: "npm"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-03-25"
roh_aktualisiert_am: "2026-03-25"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "mcp-web-recon-agent"
roh_paketversionen: "0.8.1"
roh_laufzeithinweise: ""
roh_umgebungsformate: "number, string"
roh_umgebungsbeschreibungen: "MCP_CONFIG_PATH=Optional path to a JSON config file that overrides allowlist and concurrency settings. · MCP_JOB_STORE_PATH=Optional path for persisted job metadata. Defaults to mcp-jobs.json in the current working directory. · MCP_MAX_CONCURRENT=Optional maximum number of concurrent scan jobs. Defaults to 2. · MCP_OWNED_TARGETS=Comma-separated hostnames you explicitly own to unlock active and owned-aggressive scan modes. · MCP_TARGET_ALLOWLIST=Comma-separated hostnames allowed for scanning. Required."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"mcp-web-recon-agent\",\"version\":\"0.8.1\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"MCP_TARGET_ALLOWLIST\",\"description\":\"Comma-separated hostnames allowed for scanning. Required.\",\"format\":\"string\",\"required\":true,\"secret\":false},{\"name\":\"MCP_OWNED_TARGETS\",\"description\":\"Comma-separated hostnames you explicitly own to unlock active and owned-aggressive scan modes.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_JOB_STORE_PATH\",\"description\":\"Optional path for persisted job metadata. Defaults to mcp-jobs.json in the current working directory.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"MCP_MAX_CONCURRENT\",\"description\":\"Optional maximum number of concurrent scan jobs. Defaults to 2.\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"MCP_CONFIG_PATH\",\"description\":\"Optional path to a JSON config file that overrides allowlist and concurrency settings.\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# io.github.joepangallo/web-recon-agent

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/joepangallo/web-recon-agent |
| Field of use, derived from the vendor description | sicherheit | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: Owned-target web security assessment MCP server for authenticated, high-friction apps. |
| Description (raw) | Owned-target web security assessment MCP server for authenticated, high-friction apps. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Declared version | 0.8.1 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Environment variables (raw) | MCP_TARGET_ALLOWLIST, MCP_OWNED_TARGETS, MCP_JOB_STORE_PATH, MCP_MAX_CONCURRENT, MCP_CONFIG_PATH | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret variables (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (raw) | https://github.com/joepangallo/web-recon-agent | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Package registries (raw) | npm | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-03-25 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-03-25 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package identifiers (raw) | mcp-web-recon-agent | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package versions (raw) | 0.8.1 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Runtime hints (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable formats (raw) | number, string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable descriptions (raw) | MCP_CONFIG_PATH=Optional path to a JSON config file that overrides allowlist and concurrency settings. · MCP_JOB_STORE_PATH=Optional path for persisted job metadata. Defaults to mcp-jobs.json in the current working directory. · MCP_MAX_CONCURRENT=Optional maximum number of concurrent scan jobs. Defaults to 2. · MCP_OWNED_TARGETS=Comma-separated hostnames you explicitly own to unlock active and owned-aggressive scan modes. · MCP_TARGET_ALLOWLIST=Comma-separated hostnames allowed for scanning. Required. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"mcp-web-recon-agent","version":"0.8.1","transport":"stdio","environment":[{"name":"MCP_TARGET_ALLOWLIST","description":"Comma-separated hostnames allowed for scanning. Required.","format":"string","required":true,"secret":false},{"name":"MCP_OWNED_TARGETS","description":"Comma-separated hostnames you explicitly own to unlock active and owned-aggressive scan modes.","format":"string","required":false,"secret":false},{"name":"MCP_JOB_STORE_PATH","description":"Optional path for persisted job metadata. Defaults to mcp-jobs.json in the current working directory.","format":"string","required":false,"secret":false},{"name":"MCP_MAX_CONCURRENT","description":"Optional maximum number of concurrent scan jobs. Defaults to 2.","format":"number","required":false,"secret":false},{"name":"MCP_CONFIG_PATH","description":"Optional path to a JSON config file that overrides allowlist and concurrency settings.","format":"string","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-joepangallo|io.github.joepangallo]]

---

- Registry page: <https://tracevero.com/mcp/io-github-joepangallo-web-recon-agent>
- Retrieved on: 2026-10-11
