1. Conduid
  2. Developer Tools
  3. Pwno MCP
MCP server · Developer Tools

Pwno MCP

by · github.com/pwno-io/pwno-mcp

MCP for Pwn

Unclaimed Custom license last commit 7 months ago devtools
InstallView source
77Good

Scored 3 days ago · breakdown

About Pwno MCP

Pwno MCP is an MCP server published by pwno-io in the Developer Tools category: mCP for Pwn.

The repository has 282 stars and 33 forks, with the last commit 7 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/pwno-io/pwno-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Pwno MCP

Powered by Claude · Grounded in docs

I know everything about Pwno MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 4 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v0.2.1v0.2.1 · 11 Mar 2026Highlights Add first-class multi-session debugging workflows with explicit `session_id`-scoped session lifecycle and session-aware `pwncli` interaction. Move the server onto the current FastMCP HTTP/stdio runtime model, with the MCP…
v0.1.0v0.1.0 · 10 Feb 2026CI/Release: add GitHub Actions to build + publish Docker images to GHCR on `v*.*.*` tags; semver tagging (`0.1.0`, `0.1`) and `latest`; avoid publishing the `:0` major tag for `v0.*` releases CI: add Python checks (black, mypy, pytest) and…

README

Overview

pwno-mcp runs GDB + pwndbg in an isolated environment and exposes stateful debugging, exploit I/O, and helper tooling over MCP for agentic coding clients.

Features

  • Stateful debugger sessions via GDB + pwndbg
  • Deterministic execution control via GDB/MI
  • Fast context snapshots for registers, stack, disassembly, source, and backtrace
  • Interactive exploit-driver workflows with pwncli
  • Multi-session support for parallel workflows
  • Workspace automation helpers for commands, processes, Python, repos, and RetDec
  • HTTP and stdio transport support

Documentation

The full documentation is available at docs.pwno.io.

Quick Start

Create a local workspace directory, put your target binary there, then run the container.

mkdir -p ./workspace
cp ./path/to/your/binary ./workspace/chal
chmod +x ./workspace/chal

docker run --rm -p 5500:5500 \
  --cap-add=SYS_PTRACE \
  --cap-add=SYS_ADMIN \
  --security-opt seccomp=unconfined \
  --security-opt apparmor=unconfined \
  -v "$PWD/workspace:/workspace" \
  ghcr.io/pwno-io/pwno-mcp:latest

Default MCP endpoint:

http://127.0.0.1:5500/mcp

For stdio mode, client configs, health checks, and attach-helper details, use the docs site: docs.pwno.io/quickstart.

Development

For local development, architecture, and contributing guidance, see docs.pwno.io/development.

Usage

  • non-profit: yes
  • commercial: oss@pwno.io

Future Enhancements

  • WebSocket endpoint for streaming I/O
  • Advanced memory analysis tools
  • Heap exploitation helpers
  • ROP chain generation
  • Symbolic execution integration

License

This project is licensed under CC BY-NC-ND 4.0.

See LICENSE for details.

Contributing

Issues and pull requests are welcome.

README fetched from the repository 4 days ago. The original is authoritative.

Questions

About Pwno MCP

How do I install Pwno MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Pwno MCP safe to use with an AI agent?

Its trust score is 77 out of 100 (good). It passes 4 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Pwno MCP still maintained?

The last commit was 7 months ago and 1 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.