mcp-security-hub

Overview

The mcp-security-hub project provides a well-organized collection of MCP (Model Context Protocol) servers specifically designed for security testing and penetration testing. Each server is Dockerized with security hardening measures including non-root execution, minimal base images, and resource constraints. The collection covers a wide range of security domains from reconnaissance to binary analysis, with 300+ tools accessible through natural language interfaces like Claude. The project features CI/CD pipelines with security scanning, health checks, and comprehensive documentation.

Try asking AI

After installing, here are 3 things you can ask your AI assistant:

• nmap_scan

  Port scanning, service detection, OS fingerprinting, NSE scripts

  Try:Scan 192.168.1.0/24 for web serversTry:Identify services on port 8080
• nuclei_scan

  Template-based vulnerability scanning with 8000+ templates

  Try:Check example.com for SQL injection vulnerabilitiesTry:Scan for exposed AWS keys
• sqlmap_scan

  SQL injection detection and exploitation

  Try:Test login form for SQL injectionTry:Extract database from vulnerable endpoint
• disassemble

  Disassembly and decompilation of binary files

  Try:Decompile this Windows executableTry:Analyze the assembly code of this firmware
• yara_scan

  Pattern matching for malware classification

  Try:Scan this file for known malware patternsTry:Create YARA rule for this suspicious binary
• analyze_capabilities

  Detect capabilities in executables

  Try:What capabilities does this executable have?Try:Identify network features in this binary
• fuzz_contract

  Smart contract fuzzing for Solidity vulnerabilities

  Try:Fuzz this DeFi contract for reentrancyTry:Test this token contract for overflow
• trivy_scan

  Container, filesystem, and IaC vulnerability scanning

  Try:Scan this Docker image for vulnerabilitiesTry:Analyze Terraform code for security issues
• secrets_scan

  Find secrets and credentials in git repos and files

  Try:Scan this repository for exposed API keysTry:Find hardcoded credentials in this codebase
• search_exploit

  Search and retrieve exploits from Exploit-DB

  Try:Find exploits for this software versionTry:Retrieve public exploits for this CVE
• analyze_ad

  Active Directory attack path analysis

  Try:Map attack paths in this Active DirectoryTry:Identify high-value targets in AD
• crack_hash

  Crack hashes using various algorithms

  Try:Crack this MD5 hashTry:Identify the algorithm for this hash

Note: Tool names were inferred from server descriptions and usage examples since the README doesn't provide explicit tool lists with signatures. Many servers are described as 'wrappers' for other MCP servers.

Comparable tools

Installation

git clone https://github.com/FuzzingLabs/mcp-security-hub
cd mcp-security-hub

docker-compose build

docker-compose up nmap-mcp nuclei-mcp -d

{
  "mcpServers": {
    "nmap": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "--cap-add=NET_RAW", "nmap-mcp:latest"]
    },
    "nuclei": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "nuclei-mcp:latest"]
    }
  }
}

Compare mcp-security-hub with