mcpField
M
MCP Servers Cybersecurity

MCP Servers Cybersecurity

Local
github.com/neptune1212Security3Updated 74w ago
Repository

About MCP Servers Cybersecurity

MCP Servers Cybersecurity packages network and application security tools as modular services for security testing and automation. Built with FastMCP, it runs the services through Docker Compose.

Key features

  1. 01Integrates Nmap, Metasploit, Sqlmap, and others
  2. 02Covers network and web security testing
  3. 03Exposes modules through FastMCP
  4. 04Docker-based deployment
  5. 05Supports custom modules

Use cases

  1. 01Automating network scans
  2. 02Testing for SQL and command injection
  3. 03Checking web servers and WordPress sites
  4. 04Running security tools together in containers

MCP support

The platform exposes tools such as Nmap and Sqlmap as MCP server modules for MCP clients; Metasploit is connected through RPC.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "MCP_servers_cybersecurity": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "exec"
      ]
    }
  }
}
Run commanddocker run -i --rm exec

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
ociexec

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

MCP Servers Cybersecurity

A platform for running cybersecurity MCP (Model Context Protocol) servers, integrating tools like Nmap, Metasploit, and Sqlmap as modular services. The platform is containerized using Docker for easy deployment and scalability.

📖 Overview

The MCP Servers Cybersecurity platform provides a unified interface for interacting with multiple cybersecurity tools. It uses the FastMCP framework to expose these tools as modular services, enabling automation, integration, and remote execution of cybersecurity tasks.

Current Modules
  • Nmap MCP Server: Exposes Nmap's network scanning capabilities.
  • Metasploit RPC Server: Enables interaction with Metasploit via RPC.
  • Sqlmap MCP Server: Provides SQL injection testing capabilities.
  • Nikto MCP Server: Web server scanning.
  • WPScan MCP Server: WordPress security scanning.
  • Gobuster MCP Server: Directory, DNS, and vhost brute-forcing.
  • Dirb MCP Server: Web content scanning.
  • Wfuzz MCP Server: Web application fuzzing.
  • Nuclei MCP Server: Fast vulnerability scanning.
  • Commix MCP Server: Command injection exploitation.
  • XSSer MCP Server: XSS vulnerability detection and exploitation.
Planned Modules
  • Burp Suite: Web application security testing.
  • OpenVAS/Greenbone: Vulnerability scanning.
  • Wireshark/TShark: Packet capture and analysis.
  • Custom Exploit Frameworks: Running custom scripts and exploits.
  • Threat Intelligence Feeds: Integration with external APIs.

✨ Features

  • Modular Design: Add new tools and services easily.
  • API-Driven: RESTful APIs for seamless integration.
  • Scalable Deployment: Dockerized for portability and scalability.
  • Customizable: Extend the platform to fit your needs.

⚙️ Prerequisites

Ensure the following are installed:

🚀 Getting Started

1. Clone the Repository
git clone https://github.com/yourusername/MCP_servers_cybersecurity.git
cd MCP_servers_cybersecurity
2. Build and Run the Platform

Use Docker Compose to build and start the services:

docker-compose up --build
3. Access the Services
  • Metasploit RPC Server: Port 8085
  • Nmap MCP Server: Port 8086
  • Commix MCP Server: Port 8088
  • XSSer MCP Server: Port 8089
  • WPScan MCP Server: Port 8090
  • Wfuzz MCP Server: Port 8091
  • Nuclei MCP Server: Port 8092
  • Nikto MCP Server: Port 8093
  • Gobuster MCP Server: Port 8094
  • Dirb MCP Server: Port 8095
  • Sqlmap MCP Server: Port 8096
4. Add New Modules
  1. Create a new directory under network/ or a relevant folder.
  2. Write the MCP server script using the FastMCP framework.
  3. Update the Dockerfile and start.sh to include the new module.
  4. Rebuild the Docker image:
docker-compose build

📂 Project Structure

  • network/: Contains MCP server modules.
  • docker-compose.yml: Configuration for Docker Compose.
  • start.sh: Startup script for initializing services.
  • .devcontainer/: Contains all files needed for the dev environment, including a dedicated README.

🌐 Environment Variables

Configure these in docker-compose.yml:

VariableDescriptionDefault Value
MSF_PASSWORDPassword for Metasploit RPC serveryourpassword
MSF_SERVERHost for Metasploit RPC server127.0.0.1
MSF_PORTPort for Metasploit RPC server55553
MSF_SSLEnable SSL for Metasploit RPC serverfalse

🛠️ Tools Provided

🔧 Customization

  • Add new tools as MCP modules.
  • Modify start.sh for custom startup behavior.
  • Update the Dockerfile for additional dependencies.

🐞 Troubleshooting

  • Services fail to start: Ensure Docker and Docker Compose are installed and running. Check logs using:

    docker-compose logs

  • Unable to connect to services: Verify ports 8085, 8086, 8087, and 8088 are not blocked by a firewall.

🧑‍💻 Development Environment

You can also use a development environment with Visual Studio Code Dev Containers.
All files required for the dev environment, including a dedicated README, are available in the .devcontainer folder.

This allows you to develop, test, and run the platform in a reproducible environment.

Using the Devcontainer

  1. Open the project folder in VS Code.

  2. When prompted, reopen in the container (or use the "Remote-Containers: Reopen in Container" command).

  3. The devcontainer will automatically build and start all services using Docker Compose.

  4. To enter the Kali container and run the CAI tool with autoconfiguration:

    docker exec -it kali-cai bash
source cai/bin/activate && expect configure_cai.expect

See .devcontainer/README.md for more details.

🗺️ Roadmap

  • Add support for Burp Suite, OpenVAS, and Wireshark.
  • Implement a web-based dashboard for managing MCP servers.
  • Support distributed deployments across multiple nodes.

🙌 Acknowledgments

  • Kali Linux: Base image.
  • Metasploit Framework: Penetration testing tools.
  • Nmap: Network scanning capabilities.
  • Sqlmap: SQL injection testing.
  • FastMCP: MCP server framework.
  • Docker: Containerization.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.