{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_dsxwue8d6bqx","handle":"interactsh-mcp","url":"https://wellknown.network/agents/interactsh-mcp","links":{"self":"https://wellknown.network/agents/interactsh-mcp/record.json","html":"https://wellknown.network/agents/interactsh-mcp","markdown":"https://wellknown.network/agents/interactsh-mcp/record.md","api":"https://wellknown.network/api/v1/agents/interactsh-mcp","status":"https://wellknown.network/api/v1/agents/interactsh-mcp/status","claim":"https://wellknown.network/agents/interactsh-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/interactsh-mcp/claim.json","badge":"https://wellknown.network/agents/interactsh-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/interactsh-mcp/history","tools":"https://wellknown.network/api/v1/agents/interactsh-mcp/tools"},"ard":{"identifier":"urn:air::server:interactsh-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"interactsh-mcp","summary":"Async Python client + MCP server for ProjectDiscovery's Interactsh OOB testing platform","description":"# interactsh-mcp\n\nAn MCP server that gives LLMs first-class access to [ProjectDiscovery's\nInteractsh](https://github.com/projectdiscovery/interactsh) — the out-of-band\n(OOB) interaction collector behind tools like Nuclei.\n\nUse it to let an agent validate OOB-style vulnerabilities end-to-end: blind\nSSRF, log4shell-style JNDI callbacks, blind XXE, blind SQLi exfil, DNS\nexfiltration, command-injection callbacks, blind XSS, etc. The agent gets a\nfresh payload URL, embeds it in a request to the target, and polls for the\ncallback to confirm the bug.\n\nWorks against the **public** Interactsh service (the public `oast.*`\nrotation) out of the box, and against any **self-hosted** server — with or\nwithout a token.\n\nThe package ships two things in one install:\n\n1. An **MCP server** binary (`interactsh-mcp`) for Claude Code, Codex CLI, etc.\n2. An **async Python library** (`interactsh_mcp`) you can `import` directly\n   if you'd rather drive Interactsh from your own code — see\n   [Use as a Python library](#use-as-a-python-library) below.\n\n---\n\n## Install\n\n### From PyPI (recommended)\n\n```bash\npip install interactsh-mcp\n# or, with uv:\nuv tool install interactsh-mcp\n```\n\nAfter install the `interactsh-mcp` command starts the MCP server on stdio.\n\n### From GitHub (latest, no PyPI release needed)\n\n```bash\npip install git+https://github.com/rek7/interactsh-mcp.git\n# or, run without installing:\nuvx --from git+https://github.com/rek7/interactsh-mcp.git interactsh-mcp\n```\n\n### From source\n\n```bash\ngit clone https://github.com/rek7/interactsh-mcp.git\ncd interactsh-mcp\npip install .\n```\n\n### Docker\n\n```bash\n# Build locally\ndocker build -t interactsh-mcp .\ndocker run --rm -i interactsh-mcp     # smoke test; Ctrl-D to exit\n```\n\nThe image runs as a non-root user and only needs outbound HTTPS to the\nInteractsh server.\n\n---\n\n## Configure your client\n\n### Claude Code\n\nClaude Code reads MCP servers from `~/.claude.json` (or a project-local\n`.mcp.json`). Add an entry under `\"mcpServers\"`:\n\n**Local Py…","publisher":null,"homepage":"https://github.com/rek7/interactsh-mcp","repository":"https://github.com/rek7/interactsh-mcp","version":"0.1.1","license":"MIT","protocols":["mcp"],"tags":["interactsh","mcp","oob","pentest","security","ssrf"],"pricing":null,"endpoints":[{"url":"pypi:interactsh-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"declared"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.768,"provenance":"derived"},{"slug":"dev.version-control","name":"Version Control","confidence":0.745,"provenance":"derived"}],"categories":["dev","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"interactsh-mcp","registry":"pypi","observedAt":"2026-09-15T21:22:03.345Z","publishedAt":"2026-05-17T23:13:40.089978Z","latestVersion":"0.1.1"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"interactsh-mcp","url":"https://pypi.org/project/interactsh-mcp/","firstSeenAt":"2026-09-09T22:21:48.571Z","fetchedAt":"2026-09-15T21:20:09.134Z","normalizedAt":"2026-09-15T21:20:09.134Z"}]},"firstSeenAt":"2026-09-09T22:21:48.571Z","updatedAt":"2026-09-15T21:22:03.345Z"}