hackmyagent

hackmyagent is an MCP server by opena2a-org. Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit. It has 87 GitHub stars and ranks #608 of 2217 in Developer Tools by stars.

Category

Developer Tools

Author

opena2a-org

GitHub stars

87

This week

Tracking since 18 Oct 2026

Weekly downloads

3,836

Language

TypeScript

License

Apache-2.0 (open source)

Last update

2026-10-23 (yesterday)

Links

Sourcenpm

• agent-security
• ai-agents
• ai-security
• llm-security
• mcp
• mcp-security
• penetration-testing
• prompt-injection
• red-team
• security-scanner
• tool

How to install hackmyagent

hackmyagent is published on npm as hackmyagent, and it depends on @modelcontextprotocol/sdk. These steps assume it runs as a local stdio server, which is the usual setup.

1. Check the README. Confirm the start command and note any API keys or environment variables it needs (pass them with -e KEY=value or an env block). You need Node.js for npx.
2. Add it to Claude Code from a terminal:

   claude mcp add hackmyagent -- npx -y hackmyagent

3. Or add it to Cursor or Claude Desktop in .cursor/mcp.json or claude_desktop_config.json:

   {
     "mcpServers": {
       "hackmyagent": {
         "command": "npx",
         "args": [
           "-y",
           "hackmyagent"
         ]
       }
     }
   }

4. Restart the client and check it. Run claude mcp list, or open the client's MCP settings, and confirm hackmyagent and its tools are listed. The install guide covers VS Code and Codex.

Also listed in

• MCP servers for security testing750

Maintain this project? Get it featured ($99/mo, pinned at the top of Developer Tools) or see what featuring includes.

Report a problem with this listing

Alternatives to hackmyagent

All 2217 Developer Tools MCP servers →

Data last updated 25 October 2026. Stars and downloads are refreshed every day from GitHub and npm.