AIRecon v0.1.7-beta

Significant update introducing MCP Client integration, Interactive Authentication, and major enhancements to agent intelligence, stability, and testing coverage.

---

✨ New Features

🔌 MCP Client Integration (Issue #45)

• External tool server support via SSE transport
• TUI commands: /mcp add, /mcp list, /mcp enable, /mcp disable
• REST API endpoints for MCP management
• Basic & Bearer authentication support
• Persistent configuration (~/.airecon/mcp.json)
• Async auto-discovery of available tools

🔐 Interactive Authentication (Issue #95)

• CAPTCHA detection & handling (reCAPTCHA, hCaptcha)
• RFC 6238 TOTP generator for 2FA/MFA
• Browser auth state persistence (save_auth_state, inject_cookies)
• LLM-driven interactive input workflow
• OAuth authorization flow support

🧠 Agent Intelligence Enhancements

• OWASP Auto-Tagging: Web Top 10 & API Security classification with severity scoring
• A→B Signal Method: 14 vulnerability signal types for chained discovery
• Response Signature Diffing: Advanced fuzzing validation
• Reflector Agent Pattern: XML error recovery
• Mentor Supervision: Quality control for agent decisions
• Delta-based Objective Patching: Dynamic goal adjustment

---

📚 Skills Expansion

• 29 new/upgraded skills
• 1089 keywords (+23.2% coverage)
• Major rewrites: subdomain_enum.md (106→950 lines)
• New modules:
  • Kubernetes pentesting
  • CI/CD attack vectors
  • Frida hooking
  • Blind XSS
  • And more...

---

🔧 Configuration

No breaking changes. Existing ~/.airecon/config.yaml remains compatible.

New config options:

• mcp.json — MCP server configuration
• Auth state in session data

---

🙏 Credits

• Addresses Issues #45 (MCP Client) and #95 (Interactive Auth)

---

Full Changelog: v0.1.6-beta...v0.1.7-beta