Back to Home
TheRealFREDP3D icon

HTB-MCP-Client

Verified Safe

by TheRealFREDP3D

Overview

A Textual TUI client for interacting with the HackTheBox Model Context Protocol (MCP) server, enabling users to browse CTF events and challenges, execute tools, and manage resources.

Installation

Run Command
python htb_mcp_client.py

Environment Variables

  • API_ACCESS_TOKEN
  • HTB_MCP_URL

Security Notes

The application is an API client for the HackTheBox MCP server. It securely handles API authentication via a JWT token loaded from environment variables or a .env file, following good practices for sensitive credentials. No 'eval' or obvious obfuscation techniques are present in the provided source code. Network communication is standard for an API client using the `mcp` SDK and `httpx`. File saving (JSON/Markdown) includes a timestamp in the filename, which helps mitigate basic path traversal, and content is primarily displayed within a Textual TUI, reducing rendering-related execution risks. The main security consideration is the secure management of the 'API_ACCESS_TOKEN' by the user, as compromise of this token would grant unauthorized access to the HackTheBox MCP API.

Similar Servers

Stats

Interest Score31
Security Score9
Cost ClassLow
Stars2
Forks0
Last Update2026-01-08

Tags

HackTheBoxCTFTUIPythonSecurity