MCPwned

MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a scanner and a tree-like display of capabilities, as well as a template request for each capability. It also provides quality of life features such as response extracting and session ID refresh.

{
  "mcpServers": {
    "mcpwned": {
      "command": "npx",
      "args": [
        "-y",
        "FenriskSecurity/MCPwned"
      ]
    }
  }
}

claude mcp add mcpwned npx -y FenriskSecurity/MCPwned

{
  "mcpServers": {
    "mcpwned": {
      "command": "npx",
      "args": [
        "-y",
        "FenriskSecurity/MCPwned"
      ]
    }
  }
}