0x4m4/hexstrike-ai
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
From the publisher
README & documentation
Source previewRead the project’s overview, installation instructions and usage examples. The original README is the source of truth.
[](https://www.python.org/) [](LICENSE) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai/releases) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai) Advanced AI-powered penetration testing MCP framework with 150+ security tools and 12+ autonomous AI agents Owned & developed by OTT Cybersecurity LLC 📋 What's New • 🏗️ Architecture • 🚀 Installation • 🛠️ Features • 🤖 AI Agents • 📡 API Reference HexStrike AI MCP v6.0 features a multi-agent architecture with autonomous AI agents, intelligent decision-making, and vulnerability intelligence. Watch the full installation and setup walkthrough here: YouTube - HexStrike AI Installation & Demo You can install and run HexStrike AI MCPs with various AI clients, including: Refer to the video above for step-by-step instructions and integration examples for these platforms. Core Tools (Essential): Cloud Security Tools: Browser Agent Requirements: Edit /.config/Claude/claudedesktopconfig.json: Configure VS Code settings in .vscode/settings.json: 150+ Professional Security Tools: 🔍 Network Reconnaissance & Scanning (25+ Tools) 🌐 Web Application Security Testing (40+ Tools) 🌐 Advanced Browser Agent: 🔐…
Read the full README ↗ · Preview checked 2026-10-27T21:21:47.288Z
Inside the original README — Document outline
- HexStrike AI MCP Agents v6.0
- AI-Powered MCP Cybersecurity Automation Platform
- Follow Our Social Accounts
- Architecture Overview
- How It Works
- Installation
- Quick Setup to Run the hexstrike MCPs Server
- Installation and Setting Up Guide for various AI Clients:
- Installation & Demo Video
- Supported AI Clients for Running & Integration
- Install Security Tools
- Start the Server
Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.
Links from the README
References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.
Documentation belongs to its respective authors. Reported project/model license: MIT. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.
What this repository does
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Repository facts
- Owner
- 0x4m4
- Primary language
- Python
- Stars
- 13,235
- Forks
- 2,672
- Open issues + pull requests
- 130
- License
- MIT
- Archived
- No
- Default branch
- master
- Created
- 2025-07-10T17:53:18.000Z
- Last push
- 2026-08-03T14:33:09.000Z
Topics and intended use
Owner-supplied topics: 0x4m4, ai, ai-agents, ai-cybersecurity, ai-hacking, ai-penetration-testing, ai-security-tool, artificial-intelligence, ctf-tools, generative-ai, hexstrike, kali-linux, kali-tools, llm, llm-integration, mcp, mcp-server, mcp-tools, pentesting, pentesting-tools
Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.
Evaluate before installing
Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.
Source and freshness
Source: GitHub. Metadata observed 2026-10-31T13:20:02.570Z. Daily imports are snapshots, not real-time monitoring.
Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.
Related repositories
EbookFoundation/free-programming-books
donnemartin/system-design-primer