1. Conduid
  2. Security
  3. Mapper
MCP server · Security

Mapper

MCP Mapper is an offensive security tool designed to enumerate, map, and exploit Model Context Protocol (MCP) servers. It automates reconnaissance, retrieves sensitive resources, and generates ready-to-use Python exploit stubs. Developed with Gemini as part of the Hack The Box (HTB) AI Red Teamer path.

Unclaimed last commit 8 months ago security
34Low

Scored a month ago · breakdown

About Mapper

Mapper is an MCP server published by KryMucus in the Security category: mCP Mapper is an offensive security tool designed to enumerate, map, and exploit Model Context Protocol (MCP) servers. It automates reconnaissance, retrieves sensitive resources, and generates ready-to-use Python exploit stubs. Developed with Gemini as part of the Hack The Box (HTB) AI Red Teamer path.

The repository has 2 stars and 0 forks, with the last commit 8 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/KryMucus/MCP_mapper

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Mapper

Powered by Claude · Grounded in docs

I know everything about Mapper. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Mapper

How do I install Mapper?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Mapper safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Mapper still maintained?

The last commit was 8 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.