gori MCP
An intercepting HTTP proxy with a terminal UI and MCP server: the agent reads captured traffic, replays requests and runs scans.
- 133 ★ on the repository
- Last commit
Broad access
Why this level
- Fuzzer, scanner and replay send real traffic to the target; without the owner's permission this breaks the law.
- An agent with live access builds requests to the target and sees cookies, tokens and headers from captured flows.
- A proxy with a trusted root certificate decrypts the browser's HTTPS traffic.
Install
- Works in
Manual install
curl -fsSL https://gori.hahwul.com/install.sh | bashInstalls the binary on macOS and Linux. On Windows use `choco install gori`.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Fuzzer, scanner and replay send real traffic to the target; without the owner's permission this breaks the law.
- An agent with live access builds requests to the target and sees cookies, tokens and headers from captured flows.
- A proxy with a trusted root certificate decrypts the browser's HTTPS traffic.
This is third-party code. Review the repository files before installing.
What it does
gori is a keyboard-driven proxy for testing web applications in the terminal. It records HTTP/1.1, HTTP/2, WebSocket, gRPC and SSE requests and responses as flows that can be replayed, fuzzed and scanned, and intercepted in flight on HTTP/1.1 and HTTP/2. `gori mcp` starts an MCP server: the agent reads the same project database and runs the same workflows. `gori mcp --install-claude-code` writes the config itself, with variants for Claude Desktop, Codex, Hermes and other clients. The `--read-only` flag leaves read tools only, with no live requests.
Who it is for. Pentesters and bug hunters who work in the terminal and hand traffic analysis and hypothesis checks to an agent.
Good fit when
- Captured flow history must be reviewed for suspicious endpoints.
- An agent replays a request under several roles to find broken access control.
- Session and CSRF tokens are checked for randomness.
- A project goes to an agent as read-only, with no requests sent.
Not a fit when
- You have no written permission from the target owner.
- You need autonomous scanning without an operator: the tool assumes a human at the terminal.
- You need capture outside HTTP, WebSocket, gRPC and SSE.
Example request
Open the gori project, show the endpoints from the sitemap and replay the request to `/api/orders` under two roles.MCP
- Transport
- stdio
- Authentication
- not required
Limitations
The MCP server does not start a capture proxy and works with project data. In-flight interception covers HTTP/1.1 and HTTP/2, and WebSocket messages are intercepted on HTTP/1.1 with `proto:ws` enabled. Building from source needs Crystal 1.21.0 or newer. The first install command runs a script from the author's site through `curl | bash`, so read it first. Define the engagement boundary with `scope` rules: without them an agent with live access may reach addresses outside it.
How to disable. Remove the gori entry from the client configuration, which is `~/.claude.json` for Claude Code. Delete the binary and project database separately.
FAQ
How do I connect gori to Claude Code?
Run `gori mcp --install-claude-code` and restart the client. The config is written to `~/.claude.json`.
Does the MCP server start the proxy?
No. `gori mcp` does not start a capture proxy and works with project data; the proxy starts with `gori`.
How do I stop an agent from sending requests?
Add the `--read-only` flag. Only read tools remain, with no live requests.
Which agents have an installer?
Claude Code, Claude Desktop, Codex, Antigravity CLI, Grok, Hermes and Pi.
Where does the proxy listen?
On `127.0.0.1:8070` by default. HTTPS interception needs the gori root certificate to be trusted.
Discussion
No questions or reviews yet.
Related
MCP servers70 tools for the Caido proxy: request history, replay, fuzzing and findings for an agent during authorized security testing.
MCP server and Ghidra plugin that lets an agent decompile binaries, follow cross-references and rename functions in an open project
A Ghidra extension with an MCP server: an agent reads pseudocode and disassembly, builds call graphs and edits names, types and structures via 100 tools
An MCP server for the Ghidra disassembler: hundreds of tools for reverse engineering, decompilation, renaming, structures, emulation and debugging
MCP server on mitmproxy: the agent reads HTTP traffic, rewrites responses, replays requests and builds an API spec.
A scanner that finds leaked keys, dangerous access and connected models in MCP configs of Claude Desktop, Cursor and VS Code.
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| gori (this card) | no | not required | 133 | |
| caido-mcp-server | no | key is optional | 138 | an MCP server for Caido; gori is a standalone terminal proxy that gives the agent the same set of actions |
| BurpMCP-Ultra | no | API key | 297 | an MCP bridge to Burp Suite; gori needs no graphical shell |
README in short
One engine and one project database have three entry points: the terminal UI, `gori mcp` for an agent and `gori run` for scripts and CI.