MCP for Security Tools
This repository contains Model Context Protocol (MCP) server implementations for various security testing tools, making them accessible through a standardized interface.
Tools
FFUF MCP Server
A server implementation that wraps the FFUF fuzzing tool, allowing it to be used through the MCP interface.
Features
- URL-based fuzzing
- Support for all FFUF command line arguments
Parameters
url: Target URL to fuzz
ffuf_args: Array of additional FFUF arguments
Usage
Claude Configuration
SQLmap MCP Server
A server implementation that wraps the SQLmap SQL injection testing tool, allowing it to be used through the MCP interface.
Features
- URL-based SQL injection testing
- Support for all SQLmap command line arguments
- Error handling and status reporting
- Comprehensive SQL injection testing capabilities
Parameters
url: Target URL to test for SQL injection
sqlmap_args: Array of additional SQLmap arguments
Usage
Claude Configuration
Masscan MCP Server
A server implementation that wraps the Masscan tool, allowing it to be used through the MCP interface.
Features
- Target based Port Scanning
- Support for all Masscan command line arguments
- Error handling and status reporting
Parameters
target: Target ip to scanning ports
port: Port nubmers to target ip
masscan_args: Array of additional masscan arguments
Usage
Claude Configuration
nmap MCP Server
A server implementation that wraps the nmap scanning tool, allowing it to be used through the MCP interface.
Features
- Target based port scanning
- Support for all nmap command line arguments
Parameters
target: Target p to fuzz
nmap_args: Array of additional nmap arguments
Usage
Claude Configuration
Mobsf MCP Server
A server implementation that wraps the Mobsf tool, allowing it to be used through the MCP interface.
Features
- MobSF functionality exposed through MCP
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
- Support for Android (APK), iOS (IPA), and Windows (APPX) mobile applications
Parameters
base_url: The MobSF server URL (e.g.,http://localhost:8000)
api_key: Your MobSF API key
Usage
Claude Configuration
Nuclei MCP Server
A server implementation that wraps the nuclei tool, allowing it to be used through the MCP interface.
Features
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
- Access to Nuclei's extensive template library
Parameters
url: The target URL to scan (required)
tags: Comma-separated list of template tags to filter which checks to run (optional)
Usage
Claude Configuration
Sslcan MCP Server
A server implementation that wraps the sslscan tool, allowing it to be used through the MCP interface.
Features
- Full SSLScan functionality exposed through MCP
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
- Support for all SSLScan options and configurations
Parameters
target: The target URL to scan (required)
sslscan_args: Array of additional sslscan arguments
Usage
Claude Configuration
HTTP Headers Security MCP
A server implementation that wraps the http security headers , allowing it to be used through the MCP interface.
Features
- Analysis of HTTP response headers against OWASP security standards
- Identification of security headers that should be removed
- Recommendations for missing security headers that should be added
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
Parameters
target: The target URL to analyze http headers (required)
Usage
Claude Configuration
waybackurls MCP
A server implementation that retrives the historical URLs from the Wayback Machine, allowing it to be used through the MCP interface.
Features
- Integration with Waybackurls to fetch historical URLs from the Wayback Machine
- Option to include or exclude subdomains in the search
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
Parameters
target: The domain to retrieve historical URLs for (required)
noSub: Boolean flag to control whether subdomains should be included (default: false)
Usage
Claude Configuration
alterx MCP
A server implementation that wraps the alterx tool, allowing it to be used through the MCP interface.
Features
- Pattern-based wordlist generation for subdomain discovery
- Support for multiple permutation patterns and strategies
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
Parameters
domain: The target domain or subdomains to use as a base for creating permutations (required)
pattern: The pattern template to use for generating wordlist variations (required)
outputFilePath: Path where the generated wordlist should be saved (optional)
Usage
Claude Configuration
TO-DO Tools
- amass
- massdns
- gowitness
- httpx
- ...
Development
The project uses TypeScript and the Model Context Protocol SDK. To contribute:
- Fork the repository
- Create a feature branch
- Make your changes
- Submit a pull request
License
MCP for Security Tools
This repository contains Model Context Protocol (MCP) server implementations for various security testing tools, making them accessible through a standardized interface.
Tools
FFUF MCP Server
A server implementation that wraps the FFUF fuzzing tool, allowing it to be used through the MCP interface.
Features
- URL-based fuzzing
- Support for all FFUF command line arguments
Parameters
url: Target URL to fuzz
ffuf_args: Array of additional FFUF arguments
Usage
Claude Configuration
SQLmap MCP Server
A server implementation that wraps the SQLmap SQL injection testing tool, allowing it to be used through the MCP interface.
Features
- URL-based SQL injection testing
- Support for all SQLmap command line arguments
- Error handling and status reporting
- Comprehensive SQL injection testing capabilities
Parameters
url: Target URL to test for SQL injection
sqlmap_args: Array of additional SQLmap arguments
Usage
Claude Configuration
Masscan MCP Server
A server implementation that wraps the Masscan tool, allowing it to be used through the MCP interface.
Features
- Target based Port Scanning
- Support for all Masscan command line arguments
- Error handling and status reporting
Parameters
target: Target ip to scanning ports
port: Port nubmers to target ip
masscan_args: Array of additional masscan arguments
Usage
Claude Configuration
nmap MCP Server
A server implementation that wraps the nmap scanning tool, allowing it to be used through the MCP interface.
Features
- Target based port scanning
- Support for all nmap command line arguments
Parameters
target: Target p to fuzz
nmap_args: Array of additional nmap arguments
Usage
Claude Configuration
Mobsf MCP Server
A server implementation that wraps the Mobsf tool, allowing it to be used through the MCP interface.
Features
- MobSF functionality exposed through MCP
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
- Support for Android (APK), iOS (IPA), and Windows (APPX) mobile applications
Parameters
base_url: The MobSF server URL (e.g.,http://localhost:8000)
api_key: Your MobSF API key
Usage
Claude Configuration
Nuclei MCP Server
A server implementation that wraps the nuclei tool, allowing it to be used through the MCP interface.
Features
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
- Access to Nuclei's extensive template library
Parameters
url: The target URL to scan (required)
tags: Comma-separated list of template tags to filter which checks to run (optional)
Usage
Claude Configuration
Sslcan MCP Server
A server implementation that wraps the sslscan tool, allowing it to be used through the MCP interface.
Features
- Full SSLScan functionality exposed through MCP
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
- Support for all SSLScan options and configurations
Parameters
target: The target URL to scan (required)
sslscan_args: Array of additional sslscan arguments
Usage
Claude Configuration
HTTP Headers Security MCP
A server implementation that wraps the http security headers , allowing it to be used through the MCP interface.
Features
- Analysis of HTTP response headers against OWASP security standards
- Identification of security headers that should be removed
- Recommendations for missing security headers that should be added
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
Parameters
target: The target URL to analyze http headers (required)
Usage
Claude Configuration
waybackurls MCP
A server implementation that retrives the historical URLs from the Wayback Machine, allowing it to be used through the MCP interface.
Features
- Integration with Waybackurls to fetch historical URLs from the Wayback Machine
- Option to include or exclude subdomains in the search
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
- Standardized input/output handling
Parameters
target: The domain to retrieve historical URLs for (required)
noSub: Boolean flag to control whether subdomains should be included (default: false)
Usage
Claude Configuration
alterx MCP
A server implementation that wraps the alterx tool, allowing it to be used through the MCP interface.
Features
- Pattern-based wordlist generation for subdomain discovery
- Support for multiple permutation patterns and strategies
- Simple configuration and setup
- Easy integration with other MCP-compatible tools and systems
Parameters
domain: The target domain or subdomains to use as a base for creating permutations (required)
pattern: The pattern template to use for generating wordlist variations (required)
outputFilePath: Path where the generated wordlist should be saved (optional)
Usage
Claude Configuration
TO-DO Tools
- amass
- massdns
- gowitness
- httpx
- ...
Development
The project uses TypeScript and the Model Context Protocol SDK. To contribute:
- Fork the repository
- Create a feature branch
- Make your changes
- Submit a pull request