MCPhantom is a local web dashboard for MCP endpoint recon. Discover resources, templates, tools, and prompts, then interact with them from a security console.
MCPhantom is a local web dashboard for MCP endpoint reconnaissance and exploitation. Point it at any MCP URL, discover exposed resources, templates, tools, and prompts, then interact with them from a clean security console UI. Runs locally at 127.0.0.1:1337; no cloud, no setup beyond Python. Project's Documentation can be found here.
[!WARNING] MCPhantom is an extensible security auditing framework; not a turnkey, universal scanner. It provides a solid foundation for MCP focused reconnaissance and vulnerability testing, but it is intentionally designed as a starting skeleton that you are expected to adapt to your targets, environments, and methodology. - Not guaranteed to work out of the box on every MCP server : Capabilities, schemas, transports, and response formats vary widely across implementations. Classification, payload delivery, and proof detection may need tuning per target. - Payload coverage is deliberately limited : MCPhantom includes representative probes for classes such as SQL injection, command injection, SSRF, path traversal, IDOR, and information disclosure, but it does not ship exhaustive wordlists or engine scale fuzzing comparable to tools like sqlmap, Burp Intruder, or commercial DAST platforms. - Proof heuristics are best-effort : Findings are scored from response signals (errors, data leaks, version strings, reflected output, etc.). False positives and false negatives are possible without target-specific customization. This is exactly why the framework also allows you to do manual auditing. - You are encouraged to extend it : The project is open sou
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/Dragkob--MCPhantom.html)
Collaborative AI memory for engineering teams - share context across Claude Code, Cursor, and teammates
codeztech-atique/500-AI-Agents-ProjectsThe 500 AI Agents Projects is a curated collection of AI agent use cases across various industries. It showcases practical applications and provides links to open-source projects for implementation, i
mkpoli/gmail-mcpMulti-account Gmail MCP server on Cloudflare Workers — one deployment, one Google sign-in per connection, any MCP client
qfoldit/UNITY-TOOLBELT102 composite editor-automation tools for Unity, exposed to AI agents through Unity's own official MCP bridge.
qfoldit/UNIGINE-TOOLBELT80 composite editor-automation tools for UNIGINE 2, exposed to AI agents via a companion MCP bridge that sits alongside UNIGINE's own official MCPBridge Plugin.
priyansh-narang2308/TheBlacklisted-NitroStackProtocol-0 is an MCP (Model Context Protocol) server that gives AI assistants, Claude, Cursor, ChatGPT, NitroChat, or any MCP-compatible client, real authority to act as your Site Reliability Engineer
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.