// SCAN REPORT

Redteam

20 tools. 18 can modify or destroy data without limits.

18 write tools that can modify data. Rate limits recommended.

Last updated: 29 Jun 2026

18 can modify or destroy data

2 read-only

20 tools total

Community server · catalogue entry verified 29/06/2026

How to control Redteam ↓

TOOL MAP

What Redteam exposes to your agents

Read (2) Write / Execute (18) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Redteam tools

Execute · Critical msf_auxiliary Metasploit auxiliary modules can perform a wide range of dangerous operations including network scanning, service enumeration, credential testing, protocol exploitation, and system reconnaissance. Execute · High amass_enum Amass performs active DNS enumeration and attack surface mapping against external targets. Execute · High arjun_params This tool actively probes and fuzzes a web endpoint to discover hidden parameters, which constitutes executing external network operations against a target system. Execute · Critical commix_scan This tool actively exploits OS command injection vulnerabilities, meaning it executes arbitrary OS commands on target systems.

18 of Redteam's 20 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Redteam

PolicyLayer is an MCP gateway — it sits between your AI agents and Redteam, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "theharvester_osint": {
    "limits": [
      {
        "counter": "theharvester_osint_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Redteam — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON REDTEAM →

Instant setup, no code required.

FULL CATALOGUE

All 20 Redteam tools

EXECUTE 18 tools

Execute amass_enum Perform in-depth DNS enumeration and attack surface mapping with Amass. Execute arjun_params Discover hidden HTTP GET/POST parameters on a web endpoint. Execute commix_scan Detect and exploit OS command injection vulnerabilities. Execute curl_request curl_request Execute dnsrecon_enum Perform DNS reconnaissance on a target domain. Execute ffuf_fuzz ffuf_fuzz Execute gobuster_dir gobuster_dir Execute httpx_probe httpx_probe Execute hydra_brute hydra_brute Execute msf_auxiliary Run a Metasploit Framework auxiliary module non-interactively. Execute nikto_scan Scan a web server for known vulnerabilities using Nikto. Execute nmap_scan Run an Nmap scan against a target. Execute nuclei_scan Run Nuclei template-based vulnerability scanner against a target. Execute sqlmap_scan sqlmap_scan Execute sslscan_audit Audit SSL/TLS configuration of a target for weak ciphers, protocols, and certificates. Execute subfinder_enum Enumerate subdomains of a target domain using Subfinder. Execute whatweb_scan Identify technologies used by a web application. Execute wpscan_scan Scan a WordPress site for vulnerabilities, plugins, themes, and users.

READ 2 tools

Read theharvester_osint Harvest emails, subdomains, IPs, and URLs from public sources. Read wafw00f_detect Detect Web Application Firewalls (WAF) protecting a target.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Redteam

Is the Redteam MCP server safe to use without restrictions? +

The Redteam server is primarily read-only with 2 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Redteam MCP server expose? +

20 tools across 2 categories: Execute, Read. 2 are read-only. 18 can modify, create, or delete data.

How do I enforce a policy on Redteam? +

Register the Redteam MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Redteam tool call.

Deterministic rules across all 20 Redteam tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON REDTEAM →

Instant setup, no code required.

20 Redteam tools catalogued and risk-classified — across an index of 43,000+ MCP servers.