Mcpstrike

Architecture

mcpstrike-client          mcpstrike-server (MCP)         hexstrike_server
 (TUI + Ollama)   --->    (FastMCP, port 8889)    --->   (port 8888, must be running)
      |
      v
  Ollama LLM
  (llama3.2, qwen3.5, etc.)

  Optional: mcpstrike-backend can replace hexstrike_server for local testing

Components:

Installation

Install mcpstrike in a project-local virtual environment. Its Python dependencies and all command-line entry points stay isolated from the system Python.

git clone https://github.com/ente0/mcpstrike.git
cd mcpstrike
python3 -m venv .venv
source .venv/bin/activate
python -m pip install --upgrade pip
python -m pip install -e .

Install the optional standalone backend in the same environment:

python -m pip install -e ".[backend]"

For development tools and the standalone backend:

python -m pip install -e ".[dev,backend]"

After pulling changes, refresh the active environment:

git pull
python -m pip install -e ".[dev,backend]"

Optional: expose the commands globally

While .venv is active, mcpstrike, mcpstrike-server, mcpstrike-client, mcpstrike-prompt and mcpstrike-backend are already on your PATH. To use them from any directory without activating the environment, run this from the repository root once:

printf '\nexport PATH="%s/.venv/bin:$PATH"\n' "$PWD" >> ~/.zshrc
source ~/.zshrc

For Bash, replace ~/.zshrc with ~/.bashrc in both commands. The command stores the repository's absolute .venv/bin path; recreate the environment if you move the repository.

Leave the environment when finished:

deactivate

Quick Start

hexstrike_server must already be running on port 8888 before starting mcpstrike.

Automated (recommended)

mcpstrike

mcpstrike is the stack launcher. It opens three tiled xterm windows (or falls back to tmux, then background processes). All options can be overridden via flags:

mcpstrike --model qwen3:8b
mcpstrike --ollama-url http://10.0.0.5:11434
mcpstrike --sessions-dir /opt/pentest/sessions
mcpstrike --font-size 15 --screen-width 2560 --screen-height 1440
mcpstrike --tmux                         # force tmux even if DISPLAY is set

See mcpstrike --help for all options.

Note: start.sh / my_start.sh are still available as personal launcher scripts with hardcoded IPs/model names.

Manual

# Terminal 1: MCP server (points to hexstrike_server on 8888)
HEXSTRIKE_BACKEND_URL=http://localhost:8888 mcpstrike-server

# Terminal 2: Client
mcpstrike-client --ollama-url http://<ollama-host>:11434 --model qwen3.5

With standalone backend (no hexstrike_server

... View full README on GitHub