mantishack MCP Server
deonmenezes/mantishack
[](https://agentrank-ai.com/tool/deonmenezes--mantishack/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Are you the maintainer of deonmenezes/mantishack? Claim this listing →
Mantis Hack
Add AgentRank to Claude Code Discover and compare tools like deonmenezes/mantishack — your AI finds the right one automatically
Get API Access → claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
deonmenezes/mantishack is a Rust tool licensed under Apache-2.0. Mantis Hack Topics: agent-harness, ai-agents, autonomous-agents, bug-bounty, claude-code, mcp, security, mantis, offensive-security.
Ranked #14471 out of 24846 indexed tools.
Ecosystem
Rust Apache-2.0
agent-harnessai-agentsautonomous-agentsbug-bountyclaude-codemcpsecuritymantisoffensive-security
Score Breakdown
Stars 15% 503
503 stars → growing community
Freshness 25% 1mo ago
Last commit 1mo ago → moderate activity
Issue Health 25% 0%
0/109 issues closed → many open issues
Contributors 10% 1
1 contributor → solo project
Dependents 25% 0
No dependents → no downstream usage
npm Downloads N/A
PyPI Downloads N/A
Forks 75
Description Brief
License Apache-2.0
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Description low impact
Freshness high impact
Issue Health high impact
Matched Queries
From the README
<div align="center"> # Mantishack `stalk - wait - strike - hold` **Ethically hack and discover vulnerabilities in any software with the power of AI.** [mantishack.com](https://mantishack.com) </div> --- ## What is Mantishack? Mantishack is Mantis AI: an autonomous vulnerability-discovery agent built on top of [OpenAI's Codex CLI](https://github.com/openai/codex) (Rust, Apache-2.0), rebranded and wired end-to-end as an offensive-AppSec harness. It runs a staged detect-then-validate pipeline over a codebase - recon, detect, reachability, attacker-simulation validation, chaining, gated exploitation, fixing, and reporting - with every finding owned by a tool, not tracked in prose. The core bet is the same one this project has always made: **detection is commodity, validation precision is the product.** What survives attacker-simulation is real; everything else gets rejected with a cited roadblock. It is not polished software. It is a working harness with real gaps (see "Project hiRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.