Cyberstrike
Verified · npm:@cyberstrike-ioMCP server by CyberStrikeus · updated · ★ 3.2k · 1.2k downloads a week
The first open-source AI agent built for offensive security. Autonomous pentesting from your terminal. Cyberstrike is published by npm:@cyberstrike-io from its verified domain in the official MCP Registry.
Last commit 8 days ago
AGPL-3.0-only: copyleft, check the terms before using it in a product
Clear description, published package or server URL, 3,202 stars, original repository
Downloads a script from the internet and runs it
Install Cyberstrike
Built from the published package, never by AIclaude mcp add cyberstrike -- npx -y @cyberstrike-io/cyberstrikeRun in your terminal. Add --scope user to use it in every project.
{
"mcpServers": {
"cyberstrike": {
"command": "npx",
"args": [
"-y",
"@cyberstrike-io/cyberstrike"
]
}
}
}Settings, Developer, Edit config. Paste into claude_desktop_config.json and restart.
{
"mcpServers": {
"cyberstrike": {
"command": "npx",
"args": [
"-y",
"@cyberstrike-io/cyberstrike"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project).
{
"servers": {
"cyberstrike": {
"command": "npx",
"args": [
"-y",
"@cyberstrike-io/cyberstrike"
]
}
}
}Add to .vscode/mcp.json. VS Code uses "servers", not "mcpServers".
codex mcp add cyberstrike -- npx -y @cyberstrike-io/cyberstrike{
"mcpServers": {
"cyberstrike": {
"command": "npx",
"args": [
"-y",
"@cyberstrike-io/cyberstrike"
]
}
}
}Add to ~/.gemini/config/mcp_config.json (all projects) or .agents/mcp_config.json (this project).
gemini mcp add cyberstrike npx -y @cyberstrike-io/cyberstrikeGemini CLI was replaced by Antigravity CLI in June 2026 and remains only for enterprise licences and paid API keys.
MCP servers run with your permissions and can read what you give them access to. Some need an API key: check the README and add it under env in the cyberstrike block.
Weekly newsletter
Like Cyberstrike? Get the best new MCP servers every week
The best new tools, security warnings before you install something risky, and one practical tip. Free, three minute read.
Security check
C- Downloads a script from the internet and runs itIn
README.md:curl -fsSL https://cyberstrike.io/install.sh | bash
Checked automatically: README.md, package.json. This looks for known risky patterns and is not a full audit. How grades work
Alternatives to Cyberstrike
All alternatives →Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.
Model Context Protocol for TypeScript — public Zod schemas (spec + OAuth/OpenID) (with updated dependencies)
Model Context Protocol registry, transports, and OAuth bridges for Electric Agents
Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth
Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol
OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.
Cyberstrike: common questions
How do I install Cyberstrike?
In Claude Code run claude mcp add cyberstrike -- npx -y @cyberstrike-io/cyberstrike. For Claude Desktop, Cursor and VS Code, paste the config shown above and restart. See the install guides.
Is Cyberstrike the official server?
Cyberstrike is published by npm:@cyberstrike-io from its verified domain in the official MCP Registry.
Is Cyberstrike free?
The code is published under the AGPL-3.0-only licence. The service it connects to may have its own pricing.
Is Cyberstrike safe to use?
It scores 90 of 100. Grades: maintenance A, licence C, quality A. Security check: grade C (downloads a script from the internet and runs it). Review the code before you install. How grades work.
What are alternatives to Cyberstrike?
Similar MCP servers: OpenWork MCP Gateway, Modelcontextprotocol Core, Agents MCP, MCP Remote.
Does Cyberstrike work with ChatGPT?
Not directly. It runs locally, and ChatGPT only connects to remote servers with a URL. Use it in Claude Code, Claude Desktop, Cursor, VS Code or Codex.
