Async Python client + MCP server for ProjectDiscovery's Interactsh OOB testing platform
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"interactsh-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# interactsh-mcp An MCP server that gives LLMs first-class access to [ProjectDiscovery's Interactsh](https://github.com/projectdiscovery/interactsh) — the out-of-band (OOB) interaction collector behind tools like Nuclei. Use it to let an agent validate OOB-style vulnerabilities end-to-end: blind SSRF, log4shell-style JNDI callbacks, blind XXE, blind SQLi exfil, DNS exfiltration, command-injection callbacks, blind XSS, etc. The agent gets a fresh payload URL, embeds it in a request to the target, and polls for the callback to confirm the bug. Works against the **public** Interactsh service (the public `oast.*` rotation) out of the box, and against any **self-hosted** server — with or without a token. The package ships two things in one install: 1. An **MCP server** binary (`interactsh-mcp`) for Claude Code, Codex CLI, etc. 2. An **async Python library** (`interactsh_mcp`) you can `import` directly if you'd rather drive Interactsh from your own code — see [Use as a Python library](#use-as-a-python-library) below. --- ## Install ### From PyPI (recommended) ```bash pip install interactsh-mcp # or, with uv: uv tool install interactsh-mcp ``` After install the `interactsh-mcp` command starts the MCP server on stdio. ### From GitHub (latest, no PyPI release needed) ```bash pip install git+https://github.com/rek7/interactsh-mcp.git # or, run without installing: uvx --from git+https://github.com/rek7/interactsh-mcp.git interactsh-mcp ``` ### From source ```bash git clone https://github.com/rek7/interactsh-mcp.git cd interactsh-mcp pip install . ``` ### Docker ```bash # Build locally docker build -t interactsh-mcp . docker run --rm -i interactsh-mcp # smoke test; Ctrl-D to exit ``` The image runs as a non-root user and only needs outbound HTTPS to the Interactsh server. --- ## Configure your client ### Claude Code Claude Code reads MCP servers from `~/.claude.json` (or a project-local `.mcp.json`). Add an entry under `"mcpServers"`: **Local Py…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.