operant-mcp — Claude Code MCP server: what it does, how to install
MCP server designed for security assessments, network forensics, and memory inspection directly within agent sessions. Built for penetration testers and auditors.
claude mcp add operant-mcp -- npx -y operant-mcpWhat operant-mcp does
The server delivers 51 specialized tools and 8 workflow prompts for technical security assessments. Through connected agents, you can probe web endpoints for SQL injection vulnerabilities, check cross-site scripting flaws, and evaluate IDOR issues. It tests SSRF vectors alongside NoSQL authentication bypasses.
Beyond application scanning, the server handles forensic investigations. It processes PCAP capture files, extracts cleartext credentials from protocols, and inspects memory dumps using Volatility. Additional scripts parse malicious document macros and inspect AWS CloudTrail logs.
Tools fail immediately if supporting command-line binaries are absent: PCAP operations demand tshark, memory forensic tasks require volatility, and basic HTTP tests rely on curl. Execution runs directly through npx with zero local build steps.
What it helps with
- Probe web APIs for SQL injection and cross-site scripting
- Extract plain text credentials from network packet captures
- Inspect system memory dumps for kernel rootkits
- Audit Git repositories for exposed credential secrets
Example prompts for the agent
- Run an authentication bypass test on the
/api/loginendpoint using SQL injection payloads - Analyze
traffic.pcapto extract plaintext credentials and protocol statistics - Inspect
memory.dmpusing the Windows volatility methodology to detect suspicious processes
How to install operant-mcp
Platform CLI
claude mcp add operant-mcp -- npx -y operant-mcpPlatform CLI
codex mcp add operant-mcp -- npx -y operant-mcpConfig file
{
"mcpServers": {
"operant-mcp": {
"command": "npx",
"args": [
"-y",
"operant-mcp"
]
}
}
}Config file
{
"servers": {
"operant-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"operant-mcp"
]
}
}
}Platform CLI
gemini mcp add operant-mcp npx -y operant-mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about operant-mcp
How to install operant-mcp in Claude Code?
Run claude mcp add operant-mcp -- npx -y operant-mcp. The tools will register in your environment immediately.
What does operant-mcp do?
It exposes 51 offensive and forensic utilities to coding assistants. The collection includes scanners for web vulnerabilities, network capture parsers, and structured methodology prompts.
Which system utilities must be installed beforehand?
Individual modules require local CLI programs. Network features need tshark, memory triage requires volatility, and malware inspection relies on olevba or oledump.py.
