// SCAN REPORT

Hexstrike Ai

150 tools. 114 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated:

114 can modify or destroy data
36 read-only
150 tools total

Community server · catalogue entry checked 07/07/2026

How to control Hexstrike Ai ↓

TOOL MAP

What Hexstrike Ai exposes to your agents

Read (36) Write / Execute (111) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Hexstrike Ai tools

Destructive · Medium clear_cache Clearing a cache permanently removes stored data and cannot be undone. Destructive · Critical delete_file Deletion of files or directories cannot be undone and represents permanent loss of data. Execute · Critical execute_command This tool allows execution of any command on the server without apparent constraints. Execute · Critical execute_python_script This tool allows execution of arbitrary Python code, which is the highest-risk capability.

114 of Hexstrike Ai's 150 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Hexstrike Ai

PolicyLayer is an MCP gateway — it sits between your AI agents and Hexstrike Ai, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "clear_cache": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "create_file": {
    "limits": [
      {
        "counter": "create_file_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "analyze_target_intelligence": {
    "limits": [
      {
        "counter": "analyze_target_intelligence_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Hexstrike Ai — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON HEXSTRIKE AI →

Instant setup, no code required.

FULL CATALOGUE

All 150 Hexstrike Ai tools

DESTRUCTIVE 2 tools
Destructive clear_cache Clear the cache on the HexStrike AI server. Destructive delete_file Delete a file or directory on the HexStrike server.
EXECUTE 106 tools
Execute advanced_payload_generation advanced_payload_generation Execute ai_generate_attack_suite Generate comprehensive attack suite with multiple payload types. Execute ai_generate_payload ai_generate_payload Execute ai_reconnaissance_workflow ai_reconnaissance_workflow Execute ai_test_payload ai_test_payload Execute ai_vulnerability_assessment ai_vulnerability_assessment Execute amass_scan Execute Amass for subdomain enumeration with enhanced logging. Execute angr_symbolic_execution angr_symbolic_execution Execute api_fuzzer api_fuzzer Execute arjun_parameter_discovery arjun_parameter_discovery Execute arjun_scan arjun_scan Execute arp_scan_discovery arp_scan_discovery Execute autorecon_comprehensive autorecon_comprehensive Execute autorecon_scan autorecon_scan Execute binwalk_analyze binwalk_analyze Execute browser_agent_inspect browser_agent_inspect Execute bugbounty_authentication_bypass_testing bugbounty_authentication_bypass_testing Execute bugbounty_business_logic_testing bugbounty_business_logic_testing Execute bugbounty_comprehensive_assessment bugbounty_comprehensive_assessment Execute bugbounty_file_upload_testing Create file upload vulnerability testing workflow with bypass techniques. Execute bugbounty_osint_gathering Create OSINT (Open Source Intelligence) gathering workflow for bug bounty reconnaissance. Execute bugbounty_reconnaissance_workflow bugbounty_reconnaissance_workflow Execute bugbounty_vulnerability_hunting bugbounty_vulnerability_hunting Execute burpsuite_alternative_scan burpsuite_alternative_scan Execute burpsuite_scan burpsuite_scan Execute checkov_iac_scan checkov_iac_scan Execute clair_vulnerability_scan clair_vulnerability_scan Execute comprehensive_api_audit comprehensive_api_audit Execute create_attack_chain_ai create_attack_chain_ai Execute dalfox_xss_scan dalfox_xss_scan Execute dirb_scan Execute Dirb for directory brute forcing with enhanced logging. Execute dirsearch_scan dirsearch_scan Execute discover_attack_chains discover_attack_chains Execute docker_bench_security_scan docker_bench_security_scan Execute dotdotpwn_scan dotdotpwn_scan Execute enum4linux_ng_advanced enum4linux_ng_advanced Execute enum4linux_scan Execute Enum4linux for SMB enumeration with enhanced logging. Execute execute_command Execute an arbitrary command on the HexStrike AI server with enhanced logging. Execute execute_python_script execute_python_script Execute falco_runtime_monitoring falco_runtime_monitoring Execute feroxbuster_scan feroxbuster_scan Execute ffuf_scan ffuf_scan Execute fierce_scan Execute fierce for DNS reconnaissance with enhanced logging. Execute gdb_analyze gdb_analyze Execute gdb_peda_debug gdb_peda_debug Execute generate_exploit_from_cve generate_exploit_from_cve Execute generate_payload generate_payload Execute ghidra_analysis ghidra_analysis Execute gobuster_scan gobuster_scan Execute graphql_scanner graphql_scanner Execute hashcat_crack hashcat_crack Execute hashpump_attack hashpump_attack Execute http_framework_test http_framework_test Execute http_intruder Simple Intruder (sniper) fuzzing. Iterates payloads over each param individually. Execute http_repeater Send a crafted request (Burp Repeater equivalent). request_spec keys: url, method, headers, cookies, data. Execute http_set_rules Set match/replace rules used to rewrite parts of URL/query/headers/body before sending. Execute httpx_probe httpx_probe Execute hydra_attack hydra_attack Execute install_python_package Install a Python package in a virtual environment on the HexStrike server. Execute intelligent_smart_scan intelligent_smart_scan Execute jaeles_vulnerability_scan jaeles_vulnerability_scan Execute john_crack john_crack Execute katana_crawl katana_crawl Execute kube_bench_cis kube_bench_cis Execute kube_hunter_scan kube_hunter_scan Execute masscan_high_speed masscan_high_speed Execute metasploit_run Execute a Metasploit module with enhanced logging. Execute msfvenom_generate msfvenom_generate Execute netexec_scan netexec_scan Execute nikto_scan Execute Nikto web vulnerability scanner with enhanced logging. Execute nmap_advanced_scan nmap_advanced_scan Execute nmap_scan nmap_scan Execute nuclei_scan nuclei_scan Execute objdump_analyze objdump_analyze Execute one_gadget_search one_gadget_search Execute optimize_tool_parameters_ai optimize_tool_parameters_ai Execute pacu_exploitation pacu_exploitation Execute paramspider_discovery paramspider_discovery Execute paramspider_mining paramspider_mining Execute prowler_scan prowler_scan Execute pwninit_setup pwninit_setup Execute pwntools_exploit pwntools_exploit Execute qsreplace_parameter_replacement qsreplace_parameter_replacement Execute radare2_analyze radare2_analyze Execute research_zero_day_opportunities research_zero_day_opportunities Execute responder_credential_harvest responder_credential_harvest Execute resume_process Resume a paused process. Execute ropgadget_search ropgadget_search Execute ropper_gadget_search ropper_gadget_search Execute rpcclient_enumeration rpcclient_enumeration Execute rustscan_fast_scan rustscan_fast_scan Execute scout_suite_assessment scout_suite_assessment Execute select_optimal_tools_ai select_optimal_tools_ai Execute smbmap_scan smbmap_scan Execute sqlmap_scan Execute SQLMap for SQL injection testing with enhanced logging. Execute terrascan_iac_scan terrascan_iac_scan Execute threat_hunting_assistant threat_hunting_assistant Execute trivy_scan trivy_scan Execute volatility_analyze volatility_analyze Execute volatility3_analyze volatility3_analyze Execute wafw00f_scan Execute wafw00f to identify and fingerprint WAF products with enhanced logging. Execute wfuzz_scan wfuzz_scan Execute wpscan_analyze Execute WPScan for WordPress vulnerability scanning with enhanced logging. Execute x8_parameter_discovery x8_parameter_discovery Execute xsser_scan Execute XSSer for XSS vulnerability testing with enhanced logging. Execute zap_scan zap_scan
WRITE 5 tools
Write create_file Create a file with specified content on the HexStrike server. Write create_vulnerability_report create_vulnerability_report Write http_set_scope Define in-scope host (and optionally subdomains) so out-of-scope requests are skipped. Write modify_file modify_file Write terminate_process Terminate a specific running process.
READ 36 tools
Read analyze_target_intelligence Analyze target using AI-powered intelligence to create comprehensive profile. Read api_schema_analyzer api_schema_analyzer Read checksec_analyze Check security features of a binary with enhanced logging. Read cloudmapper_analysis cloudmapper_analysis Read correlate_threat_intelligence correlate_threat_intelligence Read create_scan_summary create_scan_summary Read detect_technologies_ai Use AI to detect technologies and provide technology-specific testing recommendations. Read display_system_metrics Display current system metrics and performance indicators with visual formatting. Read dnsenum_scan dnsenum_scan Read error_handling_statistics Get intelligent error handling system statistics and recent error patterns. Read exiftool_extract exiftool_extract Read foremost_carving foremost_carving Read format_tool_output_visual format_tool_output_visual Read gau_discovery gau_discovery Read get_cache_stats Get cache statistics from the HexStrike AI server. Read get_live_dashboard Get a beautiful live dashboard showing all active processes with enhanced visual formatting. Read get_process_dashboard Get enhanced process dashboard with visual status indicators. Read get_process_status Get the status of a specific process. Read get_telemetry Get system telemetry from the HexStrike AI server. Read hakrawler_crawl hakrawler_crawl Read jwt_analyzer jwt_analyzer Read libc_database_lookup libc_database_lookup Read list_active_processes List all active processes on the HexStrike AI server. Read list_files List files in a directory on the HexStrike server. Read monitor_cve_feeds monitor_cve_feeds Read nbtscan_netbios nbtscan_netbios Read pause_process Pause a specific running process. Read server_health Check the health status of the HexStrike AI server. Read steghide_analysis steghide_analysis Read strings_extract Extract strings from a binary file with enhanced logging. Read subfinder_scan subfinder_scan Read test_error_recovery test_error_recovery Read uro_url_filtering uro_url_filtering Read vulnerability_intelligence_dashboard vulnerability_intelligence_dashboard Read waybackurls_discovery waybackurls_discovery Read xxd_hexdump xxd_hexdump
OTHER 1 tools
Other anew_data_processing anew_data_processing
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1658 tools
adminautomation
Nodebench 824 tools
adminautomation
Yaver 805 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 577 tools
adminautomation
TinyFn 572 tools
adminautomation
Mcp 571 tools
adminautomation
FAQ

Questions about Hexstrike Ai

Can an AI agent delete data through the Hexstrike Ai MCP server? +

Yes. The Hexstrike Ai server exposes 2 destructive tools including clear_cache, delete_file. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Hexstrike Ai? +

The Hexstrike Ai server has 5 write tools including create_file, create_vulnerability_report, http_set_scope. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Hexstrike Ai.

How many tools does the Hexstrike Ai MCP server expose? +

150 tools across 4 categories: Destructive, Execute, Read, Write. 36 are read-only. 114 can modify, create, or delete data.

How do I enforce a policy on Hexstrike Ai? +

Register the Hexstrike Ai MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Hexstrike Ai tool call.

Deterministic rules across all 150 Hexstrike Ai tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON HEXSTRIKE AI →

Instant setup, no code required.

150 Hexstrike Ai tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Hexstrike Ai's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.