HexStrike AI
Advanced MCP server that lets AI agents perform offensive security tasks and red-team workflows. 8,695 GitHub stars and 1 commit on main in the last 30 days.
“Advanced MCP server that lets AI agents perform offensive security tasks and red-team workflows. 8,695 stars and 1 commit on main in the last 30 days.”
INSTALL THIS SERVER
{
"mcpServers": {
"hexstrike": {
"command": "python",
"args": [
"-m",
"hexstrike_ai"
]
}
}
}
{
"mcpServers": {
"hexstrike": {
"command": "python",
"args": [
"-m",
"hexstrike_ai"
]
}
}
}
{
"mcpServers": {
"hexstrike": {
"command": "python",
"args": [
"-m",
"hexstrike_ai"
]
}
}
}
{
"mcpServers": {
"hexstrike": {
"command": "python",
"args": [
"-m",
"hexstrike_ai"
]
}
}
}
{
"mcpServers": {
"hexstrike": {
"command": "python",
"args": [
"-m",
"hexstrike_ai"
]
}
}
}
6 TOOLS AVAILABLE
OUR ASSESSMENT
- 8,695 GitHub stars.
- 1 commit on main in the last 30 days.
- MIT license.
- MITRE ATT&CK aligned technique catalog.
- End-to-end workflow from recon to reporting.
- Offensive-security tooling carries legal risk if used outside authorised engagements.
- 1 commit/30d is at the bottom of the strict gate.
- Community-maintained; no commercial security backing.
HexStrike AI executes offensive-security techniques. Use ONLY within explicit written authorisation (engagement letter, bug bounty program scope, your own infrastructure). Running against systems you do not own or have permission to test may violate the Computer Fraud and Abuse Act (US), Computer Misuse Act (UK), and similar laws worldwide. Agents that orchestrate HexStrike must include scope enforcement in the prompt path.
Authorised penetration testers running red-team engagements; security researchers studying offensive techniques; bug bounty hunters automating recon and triage within program scope.
TECHNICAL DETAILS
ADOPTION METRICS
// Reading this8,695 stars on 0x4m4/hexstrike-ai. 1 commit on main in the last 30 days.
// Reading thisPairs with Prowler, Trivy, CrowdStrike Falcon, Snyk Agent Scan, Auth0, AWS IAM, AWS CloudTrail, HashiCorp Vault, Infisical, Okta in security. HexStrike owns the offensive-security slot.
SOURCES & VERIFICATION
We don't take any single directory's word for it. Before scoring, we cross-reference 4 public MCP sources, install the server ourselves against the clients we cover, and record when we last re-verified.
The same server, 4 different lenses. We reconcile these signals into our editorial score, which is why our number sometimes diverges from a directory-aggregate star count.
| Source | Their rating | Their star count | Their downloads | Last synced |
|---|---|---|---|---|
| AutomationSwitch This page | 4.3editorial | 8,695 | — | MAY 12, 2026 |
| PulseMCP | — unrated | unavailable | unavailable | MAY 12, 2026 |
| MCP.so | — unrated | unavailable | unavailable | MAY 12, 2026 |
| Glama | — unrated | unavailable | unavailable | MAY 12, 2026 |
| Smithery | — unrated | unavailable | unavailable | MAY 12, 2026 |
// Counts are directory-reported; we don't adjust them. Discrepancies usually come from different snapshot times or star-caching.
OTHER SECURITY MCP SERVERS
Prowler MCP
Cloud Security Posture Management (CSPM) platform with 1000+ security checks across multiple cloud providers and 70+ compliance frameworks, exposed through MCP. Three deployment options: Prowler Cloud (recommended), local stdio, self-hosted HTTP. 13,717 stars, Apache-2.0.
Snyk Agent Scan
Snyk's security scanner for AI agents, MCP servers, and agent skills. Scans MCP server manifests and agent skill files for known security risks. 2,366 GitHub stars and 81 commits on main in the last 30 days.
CrowdStrike Falcon MCP
Official CrowdStrike Falcon MCP server. Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting. 148 stars and 8 commits on main in the last 30 days.
Auth0 MCP Server
Official Auth0 MCP server connecting Claude, Cursor, Windsurf, VS Code, and Gemini to Auth0 Management APIs. Create apps, deploy Actions, debug logs, and query users with natural-language commands. Read-only mode and tool-glob filtering supported. Beta software per Auth0.
HashiCorp Vault MCP
Official HashiCorp MCP for Vault: secrets, mounts, KV, and PKI management with stdio and Streamable HTTP transports. 9 commits on main in the last 30 days. MPL-2.0 with HashiCorp official-vendor signal.
AWS IAM MCP
Official AWS Labs MCP for IAM administration: users, roles, groups, policies, inline policies, access keys, and policy simulation. Read-only mode supported via --allow-write opt-in pattern. Apache-2.0 within awslabs/mcp monorepo.
DISCUSS YOUR
MCP REQUIREMENTS.
Evaluating a server, scoping an internal deployment, or working out whether MCP is the right fit at all. Start the conversation and we will point you at the right piece of the ecosystem.