Is Nyxstrike safe to use?

Nyxstrike has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Nyxstrike?

Nyxstrike can be installed by cloning its GitHub repository and following the setup instructions in the README.

What can Nyxstrike do?

Nyxstrike provides 2 tools: OpenCode, Credits. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Nyxstrike?

Nyxstrike is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Nyxstrike actively maintained?

Nyxstrike is actively maintained — last commit was 2 days ago. It has 143 GitHub stars.

Nyxstrike

Name: Nyxstrike
Author: CommonHuman-Lab

by CommonHuman-Lab

AI Powered penetration testing Platform for offensive security research

143 2 tools GitHub

No known CVEs

No license

Actively maintained

Last commit 2d ago

Works with most clients

Transport: stdio, sse, http

2 tools · ~56 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 4h ago

Edit this pageView history

Nyxstrike is an MCP server that AI Powered penetration testing Platform for offensive security research. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 70/100 on MCPpedia's security, maintenance and efficiency rubric.

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "nyxstrike": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/nyxstrike)](https://mcppedia.org/s/nyxstrike)

Read me

What Nyxstrike does

⭐ If NyxStrike improves your workflow, consider starring the repo — it helps others discover it.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

70/100across 5 weighted dimensions

How we score →

0255075100

−30

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (2)

Click any tool to inspect its schema.

~56 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Nyxstrike safe to use?: Nyxstrike has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Nyxstrike?: Nyxstrike can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can Nyxstrike do?: Nyxstrike provides 2 tools: OpenCode, Credits. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Nyxstrike?: Nyxstrike is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Nyxstrike actively maintained?: Nyxstrike is actively maintained — last commit was 2 days ago. It has 143 GitHub stars.

Similar servers

Others in security

View all →

io.github.KryptosAI/mcp-observatory94

Regression testing for MCP servers. Checks capabilities, invokes tools, detects schema drift.

174 4

io.github.jasonxkensei/xproof92

Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

1 1

Ida Pro Mcp92

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

11.6k 3

io.github.wyre-technology/rocketcyber-mcp92

MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.

MCP Security Weekly

Get CVE alerts and security updates for Nyxstrike and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "nyxstrike": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/nyxstrike)](https://mcppedia.org/s/nyxstrike)

Read me

What Nyxstrike does

⭐ If NyxStrike improves your workflow, consider starring the repo — it helps others discover it.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

README

NyxStrike

AI-powered offensive security orchestration engine

What is NyxStrike?

NyxStrike connects LLM agents to real offensive security tools and executes full attack chains — from recon to exploitation.

200+ tools · 50+ categories · AI decision engine · Tamper-evident evidence chain

🚀 Quick Start (Installation)

Get a full offensive security environment running in minutes.

git clone https://github.com/CommonHuman-Lab/nyxstrike.git
cd nyxstrike

./nyxstrike.sh -a               # Setup + start server
./nyxstrike.sh -a -t            # + install external tools

Full flag reference: Wiki — Installation & Flags

Verify Setup

Open http://localhost:8888 to access the dashboard.

Some tools (e.g. nmap, masscan) require elevated privileges for specific scan modes. Use a dedicated test VM and least-privilege setup where possible.

🔌 AI Agent Integrations (MCP)

Connect NyxStrike to any MCP-compatible AI client — OpenCode, Cursor, Claude Desktop, VS Code Copilot, Roo Code, and more.

Open http://localhost:8888/#/help for help with configurations.

Universal MCP Command

/path/to/nyxstrike/nyxstrike-env/bin/python3 \
  /path/to/nyxstrike/nyxstrike_mcp.py \
  --server http://127.0.0.1:8888 \
  --profile full

OpenCode

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nyxstrike": {
      "type": "local",
      "command": [
        "/path/to/nyxstrike/nyxstrike-env/bin/python3",
        "/path/to/nyxstrike/nyxstrike_mcp.py",
        "--server",
        "http://127.0.0.1:8888",
        "--profile",
        "full"
      ],
      "enabled": true
    }
  }
}

Config snippets for Claude Desktop, Cursor, VS Code Copilot, and security options: Wiki — MCP Setup

🔧 Features

NyxStrike does not just run tools — it orchestrates full attack chains using AI decision-making.

AI agents that chain tools automatically, guided by a decision engine that ranks and re-scores tools mid-scan
200+ offensive security tools, all agent-controllable
Full attack workflow: recon → enumeration → exploitation → reporting
Local payload & data workbench — 40+ crypto, encoding, and analysis operations, no target required
Every tool run hash-chained for tamper-evident, verifiable evidence
Real-time dashboard — live output, network topology maps
MCP-compatible — plug into any AI client you already use

Full feature breakdown · Session & workbench docs

🧰 Tool Arsenal

200+ offensive security tools across 50+ categories — all dynamically orchestrated by AI agents in real time.

Network & wireless reconnaissance
Web & API exploitation
OSINT & intelligence gathering
Password & credential attacks
Binary exploitation & reverse engineering
Cloud, container & IaC security
Digital forensics & incident response

Full tool list by category

⚠️ Security Considerations

NyxStrike gives AI agents direct access to offensive security tooling.

Run only in isolated environments or dedicated security testing VMs
AI agents may execute real commands — maintain operator oversight
Monitor activity via dashboard and logs in real time
Use NYXSTRIKE_API_TOKEN for any non-local deployment

Legal & Ethical Use

Allowed	Not Allowed
Authorized penetration testing (with written authorization)	Unauthorized testing of any system
Bug bounty programs (within program scope and rules)	Malicious, illegal

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

70/100across 5 weighted dimensions

How we score →

0255075100

−30

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (2)

Click any tool to inspect its schema.

~56 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Nyxstrike safe to use?: Nyxstrike has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Nyxstrike?: Nyxstrike can be installed by cloning its GitHub repository and following the setup instructions in the README.
What can Nyxstrike do?: Nyxstrike provides 2 tools: OpenCode, Credits. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Nyxstrike?: Nyxstrike is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Nyxstrike actively maintained?: Nyxstrike is actively maintained — last commit was 2 days ago. It has 143 GitHub stars.