MCPSmuggler

You run an MCP server that wraps the Smuggler HTTP Scanner, exposing a single tool named do_smuggler. It executes the Smuggler CLI inside a container or local runtime and communicates over MCP using FastMCP. This setup lets you perform HTTP request smuggling scans from your MCP client with a simple, focused interface.

How to use

You connect to the MCP server from your MCP client and invoke the do_smuggler tool to run the Smuggler scanner against a target URL. The server exposes a single tool that accepts a URL and runs the Smuggler CLI under the hood, returning results through the MCP transport.

How to install

Prerequisites you need on your machine before setting up the MCP server:

• Python 3.8+ must be available

• venv is recommended for isolated dependencies

Step-by-step commands to install and run locally:

git clone https://github.com/ozgurozkan123/mcpsmuggler.git
cd mcpsmuggler
python -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
python server.py  # starts the MCP server on http://0.0.0.0:8000/mcp

Additional notes

You can also deploy the server via a container environment. The server will listen for MCP connections on the standard /mcp path when started with Python. If you want to run it in a deployment environment, you typically expose the same path via a public URL and configure your MCP client to point at that URL.

Configuration examples

Here is how you configure your MCP client to talk to this server. This example assumes your MCP client supports the standard mcpServers section and targets the HTTP endpoint.

{
  "mcpServers": {
    "mcpsmuggler": {
      "url": "https://<your-render-url>/mcp"
    }
  }
}

Available tools

do_smuggler

Executes the Smuggler CLI against a target URL inside the MCP server, returning scan results through MCP transport.