Agent Plugins Marketplace
All plugins

mantis

v0.1.0

Mantis offensive-security daemon — autonomous bug bounty hunter with 7-phase FSM (RECON → AUTH → HUNT → CHAIN → VERIFY → GRADE → REPORT), parallel hunter sub-agents, cryptographic scope enforcement, and BLAKE3/Ed25519 Merkle event logs. Use only against assets you own or have explicit written authorization to test.

Codex1 MCP serverstdio

By Deon MenezesLicense: Apache-2.0 OR MIT1.1k GitHub starsUpdated 13 hours ago

Directory evidence

Runtimes
Codex
Parsed components
1 skill or MCP entry
Source updated
Sep 23, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology

Install mantis for Codex

Installs for the current user
codex plugin marketplace add IchenDEV/agent-plugin-mkt
codex plugin marketplace upgrade agent-plugin-marketplace
codex plugin add mantis@agent-plugin-marketplace

Paste and run these commands in a terminal with Codex. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/hashgraph-online/awesome-codex-plugins

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/deonmenezes/mantishack/.

Plugin files

plugins/deonmenezes/mantishack/
├── .codex-plugin/plugin.json
└── .mcp.json

MCP servers1

mantisstdio
command
npx
args
-y -p mantishack mantis-mcp

Plugin manifests1

plugins/deonmenezes/mantishack/.codex-plugin/plugin.json
{
  "name": "mantis",
  "version": "0.1.0",
  "description": "Mantis offensive-security daemon — autonomous bug bounty hunter with 7-phase FSM (RECON → AUTH → HUNT → CHAIN → VERIFY → GRADE → REPORT), parallel hunter sub-agents, cryptographic scope enforcement, and BLAKE3/Ed25519 Merkle event logs. Use only against assets you own or have explicit written authorization to test.",
  "author": {
    "name": "Deon Menezes",
    "url": "https://github.com/deonmenezes"
  },
  "homepage": "https://mantishack.com",
  "repository": "https://github.com/deonmenezes/mantishack",
  "license": "Apache-2.0 OR MIT",
  "keywords": [
    "security",
    "pentest",
    "bug-bounty",
    "offensive-security",
    "vulnerability-scanner",
    "mcp"
  ],
  "mcpServers": "./.mcp.json",
  "interface": {
    "displayName": "Mantis",
    "shortDescription": "Autonomous bug bounty hunting for authorized engagements.",
    "longDescription": "Mantis runs a 7-phase finite-state machine — RECON → AUTH → HUNT → CHAIN → VERIFY → GRADE → REPORT — with parallel hunter sub-agents, cryptographic scope enforcement, and BLAKE3/Ed25519 Merkle event logs. Generates disclosure-ready reports in Markdown, PDF, HackerOne, Bugcrowd, SARIF, and OpenVEX formats. AUTHORIZED USE ONLY — never run against assets you do not own or have explicit written authorization to test.",
    "developerName": "Deon Menezes",
    "category": "Security",
    "capabilities": [
      "Interactive",
      "MCP",
      "Security"
    ],
    "composerIcon": "./assets/icon.svg",
    "logo": "./assets/icon.svg",
    "websiteURL": "https://mantishack.com",
    "privacyPolicyURL": "https://github.com/deonmenezes/mantishack/blob/main/SECURITY.md",
    "termsOfServiceURL": "https://github.com/deonmenezes/mantishack/blob/main/DISCLAIMER_BOB_STYLE.md",
    "defaultPrompt": [
      "Start a Mantis hunt for example.com",
      "Show Mantis status for the latest run",
      "Generate a disclosure-ready report for the latest finding"
    ],
    "brandColor": "#0F1419"
  }
}

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[mantis on Agent Plugins Marketplace](https://pluginsmp.com/plugins/mantis)