Security & Testing

trickest.com

Provides searchable access to Trickest documentation, public workflow library, and documented security tool nodes like nuclei, httpx, subfinder, and sqlmap.

WebMCP2 endpoints16 known toolsFirst detected September 21, 2026Last detected September 21, 2026

ENDPOINT 1

https://trickest.com/api/mcp

No auth detected

MCP server metadata

Name: trickest-docs
Version: 1.0.0

Capabilities

toolsresourcesextensions.io.modelcontextprotocol/ui.mimeTypes

Server instructions

Read-only documentation server for trickest.com. Use search_docs first unless you already know the page, then get_doc, get_workflow, get_tool or define_term to read the full text. Call how_to_call_the_api before writing any Trickest API request or MCP client config. This server answers questions about the public site only — it cannot run workflows or read a customer's data. The product server that can is https://api.trickest.io/mcp.

Known tools 8

search_docs

Full-text search across everything published on trickest.com: product and developer documentation, the copy-and-run workflow library, nestable modules, security tool pages, the glossary and the blog.

Inferred read-only

get_doc

Return the full markdown source of one trickest.com documentation page, frontmatter included, so you can quote it exactly.

Inferred read-only

list_workflows

List the copy-and-run workflows in the public Trickest library — the catalog at trickest.com/library.

Inferred read-only

get_workflow

Return everything trickest.com publishes about one library workflow: its description, category, the ordered pipeline steps, a summary of the DAG (every node with its label and type, plus the edge count), the security tools it runs, and the full markdown page body.

Inferred read-only

list_tools

List the documented security tools that run as nodes inside a Trickest workflow (nuclei, httpx, subfinder, sqlmap and friends), with slug, absolute URL, category and one-line tagline.

Inferred read-only

get_tool

Return the documented detail of one security tool as it runs on Trickest: what it does, when to use it, its key inputs with the real CLI flags, its outputs, a runnable example command and the tool's upstream project.

Potential side effects

define_term

Return Trickest's definition of a security term from the public glossary — the short citable definition, the full entry, its category, its aliases and related terms, with the canonical URL.

Inferred read-only

how_to_call_the_api

Return the authentication and endpoint quickstart for driving Trickest from code: where the API token comes from, the REST base URL and header, the hosted product MCP endpoint with a ready client config, the SDK and CLI entry points, and links to the OpenAPI document.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.trickest-docs]
url = "https://trickest.com/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "trickest-docs": {
      "type": "http",
      "url": "https://trickest.com/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: trickest-docs
Remote MCP URL: https://trickest.com/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "trickest-docs": {
      "url": "https://trickest.com/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "trickest-docs": {
      "type": "http",
      "url": "https://trickest.com/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "trickest-docs",
  "transport": "streamable-http",
  "url": "https://trickest.com/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

ENDPOINT 2

https://trickest.com

No auth detected

MCP server metadata

Name: WebMCP

Capabilities

imperative

Known tools 8

trickest_developer_endpoints

Get the canonical Trickest developer endpoints and how to authenticate: REST API base URL, OpenAPI spec URL, hosted MCP endpoints and the Authorization header, CLI install command, SDK package, and where to create an API token. Returns the site's own /developers/llms.txt index.

Potential side effects

trickest_find_page

Search trickest.com for the page that answers a question: docs, API reference, workflow library entries, security tools, modules, glossary terms. Returns matching titles, absolute URLs and one-line summaries from the site's published /llms.txt index.

Inferred read-only

trickest_developer_endpoints

Potential side effects

trickest_find_page

Inferred read-only

trickest_developer_endpoints

Potential side effects

trickest_find_page

Inferred read-only

trickest_developer_endpoints

Potential side effects

trickest_find_page

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.webmcp]
url = "https://trickest.com"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "webmcp": {
      "type": "http",
      "url": "https://trickest.com"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: webmcp
Remote MCP URL: https://trickest.com

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "webmcp": {
      "url": "https://trickest.com"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "webmcp": {
      "type": "http",
      "url": "https://trickest.com"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "webmcp",
  "transport": "streamable-http",
  "url": "https://trickest.com"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.