Giving an AI agent a recon toolbox: wiring 30+ security tools into an MCP server

If you've watched a junior pen-tester spend a Monday morning typing the same six commands into a fresh EC2 box, you've seen the recon setup tax up close. amass enum -passive -d $TARGET , subfinder -d $TARGET -silent , pipe to httpx , pipe to naabu , feed surviving hosts into nuclei , dump JSON somewhere, repeat next quarter when the scope changes. The work isn't hard. The glue is. Every team I've talked to has rebuilt this glue at least twice, usually in a different language each time. This post