Mcp Recon Ng

io.github.daedalusPublished by GitHub account daedalusv0.1.0Updated Nov 10, 2026

MCP server exposing full recon-ng OSINT framework functionality

VerifiedSTDIODesktop onlyWeb Search & Scraping Security & Monitoring

Server details

Identifier: io.github.daedalus/mcp-recon-ng
Transport: STDIO
Runtime: Desktop only
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account daedalus for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.daedalus%2Fmcp-recon-ng.svg)](https://sourceweft.com/mcp/io.github.daedalus%2Fmcp-recon-ng?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Wraps the recon-ng OSINT framework so an assistant can manage workspaces, load modules, and run reconnaissance queries.

What you can do: Exposes recon-ng's functionality as MCP tools. It covers workspace management (list, create, switch, delete), module management (list, load, unload, set options, run), marketplace search/install/remove, database query/insert/delete, plus a generic run_command and get_info. This lets an assistant drive reconnaissance modules and inspect or modify the underlying recon-ng database.
When to use it: Useful for open-source intelligence and reconnaissance workflows where an assistant should orchestrate recon-ng modules, manage separate workspaces per target, and query collected results. It is aimed at security researchers and penetration testers rather than general-purpose tasks.
Requirements: Runs locally over stdio as a PyPI package (pip install mcp-recon-ng). recon-ng must be installed separately (pip install recon-ng). No authentication, environment variables, or headers are declared. Desktop only; network access depends on the recon-ng modules used.

Before you install

The server can run arbitrary recon-ng commands via run_command and can insert or delete database records, so actions are state-changing and may be hard to undo. Reconnaissance modules may send queries to third-party services and public data sources, and marketplace_install adds external modules. Review module options before running them.

Installation

In SourceWeft

Open Mcp Recon Ng in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

mcp-recon-ng

MCP server exposing full recon-ng OSINT framework functionality to LLMs.

[PyPI] [Python] [Ruff]

mcp-name: io.github.daedalus/mcp-recon-ng

Install

Requires recon-ng to be installed separately:

Usage

CLI

MCP Client Configuration

Add to your MCP client config:

Available Tools

Workspace Management

workspace_list() - List all workspaces
workspace_create(name) - Create a new workspace
workspace_switch(name) - Switch to a workspace
workspace_delete(name) - Delete a workspace

Module Management

module_list(category) - List available modules
module_load(module_path) - Load a module
module_unload() - Unload current module
module_options_list() - List module options
module_options_set(key, value) - Set module option
module_run() - Run loaded module

Marketplace

marketplace_search(query) - Search marketplace
marketplace_install(module_path) - Install module
marketplace_remove(module_path) - Remove module

Database Operations

db_query(table, where) - Query database
db_insert(table, data) - Insert record
db_delete(table, where) - Delete records

Utilities

run_command(command) - Execute recon-ng command
get_info() - Get system information

Example

python

from mcp_recon_ng import workspace_create, module_load, module_run
# Create a new workspaceworkspace_create("osint_project")
# Load a modulemodule_load("recon/domains-whois/whois_miner")
# Set module optionsmodule_options_set("SOURCE", "example.com")
# Run the moduleresult = module_run()

from mcp_recon_ng import workspace_create, module_load, module_run
# Create a new workspaceworkspace_create("osint_project")
# Load a modulemodule_load("recon/domains-whois/whois_miner")
# Set module optionsmodule_options_set("SOURCE", "example.com")
# Run the moduleresult = module_run()

Development

bash

git clone https://github.com/daedalus/mcp-recon-ng.gitcd mcp-recon-ngpip install -e ".[test]"
# run testspytest
# formatruff format src/ tests/
# lintruff check src/ tests/
# type checkmypy src/

git clone https://github.com/daedalus/mcp-recon-ng.gitcd mcp-recon-ngpip install -e ".[test]"
# run testspytest
# formatruff format src/ tests/
# lintruff check src/ tests/
# type checkmypy src/

Source: README.md at commit fdea402

Tools

SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts