[{"_1":2,"_161":-5,"_162":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_139":140},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_132":-5,"_133":11,"_134":17,"_135":11,"_136":-5,"_137":138},"canonicalUrl","https://hub.docker.com/r/hackerdogs/sqlmap-mcp/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","hackerdogs","reponame","sqlmap-mcp","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2026-03-02T18:28:45.271322Z","description","Sqlmap MCP Server","is_private","last_updated","2026-07-04T00:22:08.475648Z","last_modified","2026-06-26T14:48:57.558689Z","media_types",[52],"application/vnd.oci.image.index.v1+json","name","pull_count",718,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","

\n \n $\"Hackerdogs\"$ \n
\n $\"hackerdogs\"/$ \n \n

\n\n# Sqlmap MCP Server\n\nMCP server wrapper for [sqlmap](https://github.com/sqlmapproject/sqlmap) — automated detection and exploitation of SQL injection vulnerabilities.\n\n## What is Sqlmap?\n\nSqlmap is an open-source penetration testing tool that automates the detection and exploitation of SQL injection flaws, supporting backends including MySQL, PostgreSQL, Oracle, MSSQL, SQLite, and more. It can enumerate databases, extract data, read/write files on the server, and in some cases execute OS commands via database out-of-band techniques. See [sqlmapproject/sqlmap](https://github.com/sqlmapproject/sqlmap) for full documentation.\n\n**No API keys required** — sqlmap runs locally inside the Docker container.\n\n**Summary.** MCP server wrapper for [sqlmap](https://github.com/sqlmapproject/sqlmap) — automated detection and exploitation of SQL injection vulnerabilities.\n\n**Tools:**\n- `run_sqlmap` — Run sqlmap with CLI arguments (e.g. example.com).\n\n## Tools Reference\n\n### `run_sqlmap`\n\nRun sqlmap with CLI arguments (e.g. example.com).\n\n| Parameter | Type | Required | Default | Description |\n|-----------|------|----------|---------|-------------|\n| `arguments` | str | Yes | — | Command-line arguments (e.g. `\"--help\"`) |\n| `timeout_seconds` | int | No | `300` | Maximum execution time in seconds |\n\n

Example response

\n\n```json\n{\n \"raw\": \"sqlmap output will appear here\"\n}\n```\n\n

\n\n## Example Prompts\n\nHere are example prompts you can use with Claude (or any MCP client) when this tool is connected:\n\n- \"Test http://testphp.vulnweb.com/listproducts.php?cat=1 for SQL injection using sqlmap.\"\n- \"Run sqlmap against the login form at http://target.local/login.php and try to enumerate databases.\"\n- \"Use sqlmap with --dbs to list all databases on the target URL http://example.com/page?id=1.\"\n- \"Run sqlmap with --level=3 --risk=2 for a thorough SQL injection test on http://target.com/item?id=5.\"\n- \"Use sqlmap to dump the users table from the targetdb database on http://example.com/page?id=1.\"\n- \"Run sqlmap with --batch --forms to automatically test all forms on http://target.local/.\"\n\n## Deploy\n\n### Docker Compose (recommended)\n\n```bash\ndocker-compose up -d\n```\n\n### Docker Run (stdio mode)\n\n```bash\ndocker run -i --rm hackerdogs/sqlmap-mcp:latest\n```\n\n### Docker Run (HTTP streamable mode)\n\n```bash\ndocker run -d -p 8394:8394 \\\n -e MCP_TRANSPORT=streamable-http \\\n -e MCP_PORT=8394 \\\n hackerdogs/sqlmap-mcp:latest\n```\n\n## MCP Client Configuration\n\n### Stdio mode (default)\n\nAdd to your Claude Desktop or Cursor MCP config:\n\n```json\n{\n \"mcpServers\": {\n \"sqlmap-mcp\": {\n \"command\": \"docker\",\n \"args\": [\"run\", \"-i\", \"--rm\", \"-e\", \"MCP_TRANSPORT\", \"hackerdogs/sqlmap-mcp:latest\"],\n \"env\": {\n \"MCP_TRANSPORT\": \"stdio\"\n }\n }\n }\n}\n```\n\n### HTTP mode (streamable-http)\n\nFirst, start the server using Docker Compose or `docker run` with HTTP mode (see [Deploy](#deploy) above), then point your MCP client at the running server:\n\n```json\n{\n \"mcpServers\": {\n \"sqlmap-mcp\": {\n \"url\": \"http://localhost:8394/mcp\"\n }\n }\n}\n```\n\n> **When to use HTTP mode:** HTTP mode is ideal for shared/remote deployments, multi-user setups, and [Hackerdogs](https://hackerdogs.ai) scheduled prompts. The server runs as a long-lived process and accepts connections from multiple MCP clients concurrently.\n\n## Environment Variables\n\n| Variable | Default | Description |\n|----------|---------|-------------|\n| `MCP_TRANSPORT` | `stdio` | Transport mode: `stdio` or `streamable-http` |\n| `MCP_PORT` | `8394` | HTTP port (only used with `streamable-http`) |\n\n## Installing in Hackerdogs\n\nThe fastest way to get started is through [Hackerdogs](https://hackerdogs.ai):\n\n1. **Log in** to your Hackerdogs account.\n2. Go to the **Tools Catalog**.\n3. **Search** for the tool by name (e.g. \"nuclei\", \"naabu\", \"julius\").\n4. Expand the tool card and click **Install** — you're ready to go.\n\n> Give it a couple of minutes to go live. Then start querying by asking Hackerdogs to use the tool explicitly (e.g. *\"Use naabu to scan example.com\"*). If you don't specify, Hackerdogs will automatically choose the best tool for the job — it may choose this one on its own.\n\n5. **Vendor API key required?** Add your key in the config environment variable field before clicking Install. Your key will be encrypted at rest.\n6. **Enable / Disable** the tool anytime from the **Enabled Tools** page.\n7. **Need to update a key or parameter?** Go to **My Tools** → toggle **Show Decrypted Values** → edit → **Save**.\n\n> **Want to contribute or chat with the team?** Join our [Discord](https://discord.gg/str9FcWuyM).\n\n## Build\n\n```bash\ndocker build -t hackerdogs/sqlmap-mcp:latest .\n```\n\n## Testing\n\n### Automated tests\n\n```bash\n./test.sh\n```\n\n### Test directly with Docker\n\n**1. Start the server in HTTP mode:**\n\n```bash\ndocker run -d --rm --name sqlmap-mcp-test -p 8394:8394 \\\n -e MCP_TRANSPORT=streamable-http \\\n hackerdogs/sqlmap-mcp:latest\n```\n\n**2. Initialize the MCP session:**\n\n```bash\nSESSION_ID=$(curl -s -D - -X POST http://localhost:8394/mcp \\\n -H \"Content-Type: application/json\" \\\n -H \"Accept: application/json, text/event-stream\" \\\n -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2024-11-05\",\"capabilities\":{},\"clientInfo\":{\"name\":\"test\",\"version\":\"0.1\"}}}' \\\n 2>&1 | grep -i mcp-session-id | awk '{print $2}' | tr -d '\\r\\n')\n\ncurl -s -X POST http://localhost:8394/mcp \\\n -H \"Content-Type: application/json\" \\\n -H \"Accept: application/json, text/event-stream\" \\\n -H \"mcp-session-id: $SESSION_ID\" \\\n -d '{\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"}'\n```\n\n**3. Call a tool:**\n\n```bash\ncurl -s -X POST http://localhost:8394/mcp \\\n -H \"Content-Type: application/json\" \\\n -H \"Accept: application/json, text/event-stream\" \\\n -H \"mcp-session-id: $SESSION_ID\" \\\n -d '{\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/call\",\"params\":{\"name\":\"run_sqlmap\",\"arguments\":{\"arguments\":\"--help\"}}}'\n```\n\n**4. Clean up:**\n\n```bash\ndocker stop sqlmap-mcp-test\n```\n\n## Running the tool directly (bypassing MCP)\n\nYou can run the Sqlmap CLI in the same container by overriding the entrypoint without starting the MCP server.\n\n**Show help:**\n\n```bash\ndocker run -i --rm --entrypoint sqlmap hackerdogs/sqlmap-mcp:latest --help\n```\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",367450779,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98,"_46":121,"_122":90,"_123":29,"_124":52,"_53":125,"_126":127,"_128":106,"_129":121,"_130":62,"_131":17},"content_type","creator",38462728,"digest","sha256:7cfd1da6ce4535a94b810b81d633d895067976be573c63cdf1cc66cb87a516b9","full_size",94870077,"id",1089503498,"images",[99,115],{"_100":101,"_91":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":94,"_59":62,"_114":-5},"architecture","arm64","sha256:a07404bae9a2341a8a2e222d50677b639c72279a165c9a1e5cc81e4665e68e11","features","","last_pulled","2026-09-13T18:57:58.185193048Z","last_pushed","2026-07-04T00:22:07.327725364Z","os","linux","os_features","os_version","size","variant",{"_100":116,"_91":117,"_103":104,"_105":118,"_107":119,"_109":116,"_111":104,"_112":-5,"_113":120,"_59":62,"_114":-5},"unknown","sha256:bf9ba44c3364567382134333a9ec2f8bb48e1dc146734a6f424735fc08e425fa","2026-08-27T04:05:41.972294165Z","2026-07-04T00:22:07.214940677Z",1219,"2026-07-04T00:22:08.203729Z","last_updater","last_updater_username","media_type","latest","repository",30270344,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":141,"_148":149,"_137":159,"_160":11},{"_36":142,"_38":143,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":144,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":145,"_75":11,"_76":147,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":146},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_150":60,"_151":-5,"_152":-5,"_153":154},"count","next","previous","results",[155],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":156,"_46":121,"_122":90,"_123":29,"_124":52,"_53":125,"_126":127,"_128":106,"_129":121,"_130":62,"_131":17},[157,158],{"_100":101,"_91":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":94,"_59":62,"_114":-5},{"_100":116,"_91":117,"_103":104,"_105":118,"_107":119,"_109":116,"_111":104,"_112":-5,"_113":120,"_59":62,"_114":-5},[],"canDeleteTags","actionData","errors"]

hackerdogs/sqlmap-mcp

Tags for hackerdogs/sqlmap-mcp