run_netdiscover_scan

What run_netdiscover_scan does on Pentester-MCP

AI agents invoke run_netdiscover_scan to trigger actions in Pentester-MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why run_netdiscover_scan is rated High

Netdiscover is a network reconnaissance tool used to discover live hosts on a network. Running network scans against external or unauthorized networks is an active operation with significant implications. Given the server context explicitly mentions autonomous execution of pentesting tools including reconnaissance, this tool actively executes a scan (network probing), placing it in the Execute category.

From the tool's definition Tool name 'run_netdiscover_scan' on a penetration testing server that 'autonomously execute over 200 open-source penetration testing tools' including 'reconnaissance'. The tool description is empty and uninformative.

The rule that runs run_netdiscover_scan safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pentester-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For run_netdiscover_scan, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "run_netdiscover_scan": {
      "limits": [
        {
          "counter": "run_netdiscover_scan_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about run_netdiscover_scan