PocMap¶
AI-agent-optimized CVE / PoC / exploit-discovery toolkit — CLI, Python API, and MCP server (22 tools).
What you get¶
- Multi-source exploit discovery (GitHub, Exploit-DB, Metasploit, Nuclei, labs, bug bounty write-ups)
- Structured Pydantic models with JSON Schema export
- MCP server for Claude Desktop, Cursor, and other MCP clients
- Rich CLI with table / JSON / CSV / Markdown / SARIF output
- Security-hardened HTTP (SSRF guards, sandboxed HTML reports)
Start here¶
- Getting started — install, first CLI lookups, Claude/Cursor MCP configs
- CLI reference —
latest,discover,package, formats, caching, CI gate - Python API — service examples and schema export
- Configuration — env vars, cache, offline, PoC source fetch
- Bug Bounty Toolkit — checklists, workflows, templates, scope, playbooks
- Verifying PoCs — opt-in source download and verdict tiers
- MCP tools reference — generated inventory + input schemas
- Data model schemas — Pydantic JSON Schema for core models
- Architecture — layers and where code lives
- Contributing — in-tree sources, plugins, local setup
Install and a short quick start also live in the GitHub README.