start_ssrfmap_handler

What start_ssrfmap_handler does on Pentester-MCP

AI agents invoke start_ssrfmap_handler to trigger actions in Pentester-MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why start_ssrfmap_handler is rated High

This tool triggers external operations (starting an SSRF exploitation handler) whose effects depend on how it is configured and what target is provided. SSRF exploitation can lead to internal network reconnaissance, data exfiltration, or access to restricted services. The empty description lowers confidence slightly, but the tool name and server context clearly indicate Execute-category behavior.

From the tool's definition Tool name 'start_ssrfmap_handler' indicates starting a handler for SSRFmap, a penetration testing tool that exploits Server-Side Request Forgery (SSRF) vulnerabilities. The server description explicitly mentions this MCP enables 'exploitation' tools.

The rule that runs start_ssrfmap_handler safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pentester-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For start_ssrfmap_handler, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "start_ssrfmap_handler": {
      "limits": [
        {
          "counter": "start_ssrfmap_handler_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about start_ssrfmap_handler