repowiseusestrix/strix

usestrix / strix

★ 71,297
Use in your agentAsk this codebase

github.com/usestrix/strixIndexed at 6b9bd4dUp to date with upstream

What is strix?

strix is an open-source security testing tool for developers and security teams. It runs applications dynamically, finds vulnerabilities, and validates them with proof-of-concepts. The repository uses Python and provides a command-line interface with Docker-based execution.

Written by a model from the README and the source

Start reading

Code health

Health scores land with the first index: complexity, duplication, coverage, churn and ownership across every file.

Use usestrix/strix in your agent

Point Claude Code, Cursor, Codex or VS Code at this repository. Your agent gets the index this page is built from: cited answers, callers, history and health for any file.

  1. 1.In Claude, open Customize → Connectors, click +, then Add custom connector. On a Team or Enterprise plan an owner adds it first under Organization settings → Connectors.
  2. 2.Paste the server URL below as the Remote MCP server URL, then click Add.
  3. 3.Click Connect. A Repowise sign-in window opens. Approve access.
  4. 4.Repowise's tools are now available in your Claude chats.

Connect with one click. Sign in with Repowise (OAuth), no API key to copy. Works in Claude on the web, desktop, and mobile.

Docs
bash
https://api.repowise.dev/mcp/usestrix/strix
Editors need an API key: sign in to create one.Sign in to connect

This repo is public, so anyone with a Repowise account and an API key can connect.

Try asking

  • get_overview()
  • get_answer("how is strix put together?")
  • get_why("why is strix structured this way?")

Explore strix

Key features of strix

  • Strix uses autonomous AI agents to find and validate application vulnerabilities with proof-of-concepts.
  • Strix provides a security testing toolkit with HTTP proxying, browser automation, terminal environments, Python runtime support, reconnaissance, and code analysis.
  • Strix coordinates specialized agents that collaborate and share discoveries during security testing.
  • Strix supports application security testing, penetration testing, bug bounty research, and CI/CD security checks.
  • Strix provides actionable reports, reproduction steps, and automated fixes as pull requests.

How usestrix/strix works

The strix command-line interface accepts targets such as local directories, GitHub repositories, and web applications. Strix agents run the target code dynamically and use security testing tools to investigate possible vulnerabilities. Agent capabilities include HTTP request analysis, browser automation, terminal environments, Python-based exploit development, reconnaissance, and code analysis. The agents coordinate discoveries through multi-agent workflows and produce validated findings with reproduction steps and reports. Docker provides the sandbox environment, and scan results are saved to strix_runs/. The docs directory provides usage and configuration documentation, while the tests directory contains the repository's tests.

Getting started with strix

  1. Configure the AI provider.
    export STRIX_LLM="openai/gpt-5.4"
  2. Set the LLM API key.
    export LLM_API_KEY="your-api-key"
  3. Run a security assessment against an application directory.
    strix --target ./app-directory

Commands copied from the README

usestrix/strix FAQ

What is strix?

strix is an open-source security testing tool for developers and security teams. Strix uses autonomous AI agents to find application vulnerabilities and validate them with proof-of-concepts.

How does strix work?

strix runs target code dynamically and coordinates AI agents that investigate vulnerabilities. Strix uses Docker-based environments and produces validated findings, reproduction steps, and reports.

How do I install strix?

You install strix with its shell installation command, configure an LLM provider and API key, then run a target assessment with the CLI.

What language is strix written in?

strix is written in Python. Strix also uses Docker for its sandbox execution environment.

How is the strix code organized?

strix is organized around the strix source directory, with docs for documentation and tests for test code. The repository also includes scripts, containers, benchmarks, and GitHub configuration.

Who is strix for?

strix is for developers and security teams that need application security testing. Strix supports application testing, penetration testing, bug bounty research, and CI/CD checks.

What license does strix use?

strix uses the Apache-2.0 license.

The summary, features and answers on this page are written by a model from the README and the source, and refreshed with each index.

About this page

Get a page like this for your own codebase

Repowise built this map of usestrix/strix from its source and git history. It parses every symbol, draws the dependency graph, scores each file's health from complexity, duplication, coverage and churn, finds hotspots and owners in the history, and writes documentation for every module. Your coding agent reads the same index over MCP, so its answers cite real files.

Index your repo freeSee how Repowise worksFree for 2 public repos, with a page like this one.

Prefer local? pip install repowise && repowise init indexes your own checkout, no account needed.