Skip to content
appsgit

Blitzstrike

Blitzstrike is an MCP server that adds tools to AI assistants such as Claude Desktop, Claude Code and Cursor. Blitz Strike — a universal MCP security-audit toolbelt. It has 514 GitHub stars, is released under the MIT license and runs locally with npx -y blitzstrike.

github.com/shinthink/blitzstrike (opens in a new tab)

Data as of from the GitHub API; description from the project's repository. Report an error

View on GitHub (opens in a new tab)

Install Blitzstrike

Generated from the server's published package. Replace your-value with your own values.

Claude Desktop

claude_desktop_config.json
{
  "mcpServers": {
    "blitzstrike": {
      "command": "npx",
      "args": [
        "-y",
        "blitzstrike"
      ]
    }
  }
}

Settings > Developer > Edit Config. macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\. Restart Claude Desktop afterwards.

Claude Code

claude mcp add --transport stdio blitzstrike -- npx -y blitzstrike

Cursor

.cursor/mcp.json
{
  "mcpServers": {
    "blitzstrike": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "blitzstrike"
      ]
    }
  }
}

Project file; use ~/.cursor/mcp.json to enable it in every project.

VS Code

.vscode/mcp.json
{
  "servers": {
    "blitzstrike": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "blitzstrike"
      ]
    }
  }
}

Config formats checked against the official docs on Oct 7, 2026: modelcontextprotocol.io (opens in a new tab), code.claude.com (opens in a new tab), cursor.com (opens in a new tab), code.visualstudio.com (opens in a new tab).

About Blitzstrike

Reconnaissance at speed. Analysis in depth. Validation before report. Blitz Strike is a structured penetration-testing methodology — reconnaissance, source analysis, and validation — delivered as a universal MCP server. It enumerates the attack surface (BLITZ), traces source-to-sink reachability (EAGLE-EYE), and verifies each finding live before it is reported (STRIKE).

  • active-directory
  • blue-team
  • bug-bounty
  • cve
  • defensive-security
  • exploit
  • nuclei
  • offensive-security
  • payloads
  • pentest

Similar MCP servers

More other MCP servers

All Other

FAQ

Blitzstrike FAQ

Still curious? Email info@appsgit.com.

How do I install the Blitzstrike MCP server?

Add the command npx -y blitzstrike to your MCP client: put it in claude_desktop_config.json for Claude Desktop, run claude mcp add for Claude Code, or add it to .cursor/mcp.json (Cursor) or .vscode/mcp.json (VS Code). The snippets on this page are ready to paste.

Is Blitzstrike free?

The server is open source under the MIT license, so running it is free. It does not declare any required API key.

Is Blitzstrike actively maintained?

The most recent commit was on Oct 18, 2026. The latest release is v1.0.0, published Sep 12, 2026. appsgit only lists MCP servers with a commit in the last six months.