เซิร์ฟเวอร์ MCP MCP For Security Python | PlugMCP
ข้ามไปยังเนื้อหา ไดเรกทอรี ผลิตภัณฑ์ แหล่งข้อมูล Pricing
เอกสารประกอบ 中文
MCP for Security - Python Version
This is a Python refactored version of the security tools MCP (Model Context Protocol) server collection, implemented using the FastMCP library.
🌟 Project Origin & Declaration
一个为主流渗透测试工具打造的MCP服务器集合。 | A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.
เสียบเครื่องมือใดก็ได้เข้ากับเอเจนต์ใดก็ได้ ไดเรกทอรี MCP สำหรับคนที่ไม่เขียนเซิร์ฟเวอร์
ผลิตภัณฑ์
ไดเรกทอรี
นักพัฒนา
บริษัท
Acknowledgment to Original Author This project is a complete Python refactoring based on cyproxio/mcp-for-security cyproxio for open-sourcing this excellent security tools MCP server collection, which provides important contributions to the standardization of cybersecurity tools.
Refactoring Notes ⚠️ Important Declaration:
This project was completely refactored by Claude 4 AI , converting from JavaScript/TypeScript to Python
Has NOT been verified through manual real-machine testing , may contain runtime errors or functional defectsCode logic is based on translation and adaptation from the original version, but may contain understanding bias
Please analyze the code yourself , use cautiously in production environmentsIf issues are found, welcome to submit PRs or Issues to help improve the project
🎯 Project Goals Complete refactoring of 20 JavaScript version security tool MCP servers to Python version, maintaining:
✅ 100% API compatibility (theoretically)
✅ Same functionality and parameters
✅ Independent operation with no interdependencies
✅ Detailed Chinese documentation
📁 Project Structure mcp-for-security-python/
├── README.md # This file
├── sqlmap-mcp/ # SQL injection testing tool
├── assetfinder-mcp/ # Subdomain discovery tool
├── waybackurls-mcp/ # Historical URL discovery tool
├── crtsh-mcp/ # SSL certificate log query tool
├── shuffledns-mcp/ # DNS brute force tool
├── httpx-mcp/ # HTTP service detection tool
├── ffuf-mcp/ # Web fuzzing tool
├── nuclei-mcp/ # Vulnerability scanning tool
├── nmap-mcp/ # Network scanning tool
├── masscan-mcp/ # High-speed port scanning tool
├── alterx-mcp/ # Domain mutation generation tool
├── arjun-mcp/ # HTTP parameter discovery tool
├── katana-mcp/ # Web crawler tool
├── sslscan-mcp/ # SSL/TLS security scanning tool
├── http-headers-security-mcp/ # HTTP header security check tool
├── mobsf-mcp/ # Mobile app security analysis tool
├── scoutsuite-mcp/ # Cloud security audit tool
├── smuggler-mcp/ # HTTP request smuggling vulnerability detection
├── amass-mcp/ # Asset discovery and reconnaissance tool
└── wpsscan-mcp/ # WordPress security scanning tool
🚀 MCP Server List
✅ Completed (20/20 - 100%)
Basic Tools
assetfinder-mcp - Subdomain discovery tool
Function: Quickly discover subdomains of target domains
Feature: Automatic ANSI color code cleaning
waybackurls-mcp - Historical URL discovery tool
Function: Retrieve historical URLs from Wayback Machine
Feature: Support include/exclude subdomain options
crtsh-mcp - SSL certificate log query tool
Function: Discover subdomains from certificate transparency logs
Feature: API calls, no local tools required
shuffledns-mcp - DNS brute force tool
Function: Efficient DNS resolution and brute forcing
Feature: Integrated massdns, supports multiple modes
alterx-mcp - Domain mutation generation tool
Function: Generate domain mutations for subdomain discovery
Feature: Support multiple mutation modes and custom templates
Scanning Tools
httpx-mcp - HTTP service detection tool
Function: Fast HTTP/HTTPS service discovery
Feature: Rich detection options and concurrent processing
nmap-mcp - Network scanning tool
Function: Comprehensive network discovery and port scanning
Feature: Complete nmap parameter support
masscan-mcp - High-speed port scanning tool
Function: High-speed large-scale port scanning
Feature: Support custom rates and port ranges
nuclei-mcp - Vulnerability scanning tool
Function: Template-based vulnerability scanning
Feature: Multiple tool functions, including tag retrieval API
sslscan-mcp - SSL/TLS security scanning tool
Function: SSL/TLS configuration and vulnerability detection
Feature: Support multiple SSL/TLS testing options
Fuzzing Tools
ffuf-mcp - Web fuzzing tool
Function: High-performance web directory and parameter fuzzing
Feature: Complete parameter configuration support
arjun-mcp - HTTP parameter discovery tool
Function: Discover hidden HTTP GET/POST parameters
Feature: Support multiple detection modes and custom dictionaries
Web Crawler
katana-mcp - Web crawler tool
Function: Fast web crawling and endpoint discovery
Feature: Support JavaScript rendering and deep crawling
Vulnerability Testing
sqlmap-mcp - SQL injection testing tool
Function: Automated SQL injection detection and exploitation
Feature: Support rich parameter configurations
smuggler-mcp - HTTP request smuggling vulnerability detection
Function: Detect HTTP Request Smuggling vulnerabilities
Feature: Support CL.TE and TE.CL type detection
wpsscan-mcp - WordPress security scanning tool
Function: WordPress website security vulnerability scanning
Feature: Support plugin, theme, user enumeration, etc.
Security Audit
http-headers-security-mcp - HTTP header security check tool
Function: Analyze security configuration of HTTP response headers
Feature: Security assessment based on OWASP standards
mobsf-mcp - Mobile app security analysis tool
Function: Android/iOS mobile app security analysis
Feature: API integration, support static and dynamic analysis
scoutsuite-mcp - Cloud security audit tool
Function: Multi-cloud platform security configuration audit
Feature: Support AWS, Azure, GCP and other cloud platforms
amass-mcp - Network asset discovery tool
Function: Comprehensive network asset discovery and reconnaissance
Feature: Support multiple data sources and deep reconnaissance
🛠️ Technical Features
Unified Architecture
Framework : FastMCP 2.0+Language : Python 3.8+Async Processing : asyncioType Annotations : typing module
Core Functions
Tool Functions : @mcp.tool() decoratorAsync Execution : subprocess + asyncioError Handling : Unified exception capture and returnDocumentation Support : Complete docstring and parameter descriptions
Implementation Patterns
1. Command Line Tool Wrapper (Most tools) @mcp.tool()
async def tool_name(target: str, args: List[str] = None) -> str:
cmd = [tool_command] + construct_args(target, args)
process = await asyncio.create_subprocess_exec(...)
stdout, _ = await process.communicate()
return process_output(stdout)
2. API Call Integration (crtsh-mcp, mobsf-mcp, etc.) @mcp.tool()
async def api_tool(target: str) -> str:
async with aiohttp.ClientSession() as session:
async with session.get(api_url) as response:
data = await response.json()
return process_api_data(data)
3. Multiple Tool Functions (nuclei-mcp, etc.) @mcp.tool()
async def primary_function(...) -> str:
# Main functionality
@mcp.tool()
async def helper_function(...) -> str:
# Helper functionality (like getting configs, tags, etc.)
📦 Installation and Usage
Environment Requirements # Python environment
python >= 3.8
# Install FastMCP
pip install fastmcp>=2.0.0
# Install additional dependencies as needed
pip install aiohttp>=3.8.0 # For API-based tools
General Usage Process cd mcp-for-security-python/[tool-name]-mcp/
pip install -r requirements.txt
# For command line tools (most)
python server.py [tool-binary-path]
# For API tools (like mobsf-mcp)
python server.py [api-base-url] [api-key]
# For script tools (like smuggler-mcp)
python server.py [python-path] [script-path]
{
"mcpServers": {
"tool-name-mcp": {
"command": "python",
"args": ["/path/to/tool-mcp/server.py", "tool-binary"]
}
}
}
🔧 Development Guide
Refactoring Standards
API Compatibility : Maintain exactly the same interface as JavaScript versionFunction Description : Directly use original docstring contentParameter Handling : Support same parameter types and structuresError Handling : Unified exception handling and return formatsDocumentation Completeness : Each tool has detailed README.md
Code Template #!/usr/bin/env python3
"""
Tool MCP Server
Description of the tool functionality.
"""
import sys
import asyncio
from typing import List, Optional
from mcp.server.fastmcp import FastMCP
# Command line argument handling
if len(sys.argv) < 2:
print("Usage: python server.py <tool-binary>", file=sys.stderr)
sys.exit(1)
tool_command = sys.argv[1]
mcp = FastMCP("tool-name", version="1.0.0")
@mcp.tool()
async def tool_function(param: str, optional_param: Optional[List[str]] = None) -> str:
"""Tool function description"""
# Implementation
pass
if __name__ == "__main__":
mcp.run()
🐛 Known Issues & Limitations
Potential Issues
Not real-machine tested : All code is AI-refactored, not verified through actual executionDependency compatibility : May have Python library version compatibility issuesParameter parsing : Command line parameter construction may contain errorsException handling : Error handling logic may not be comprehensive enoughPerformance optimization : Not optimized for Python-specific features
How to Contribute We welcome community contributions to improve this project:
Testing verification : Test tool functionality in actual environmentsIssue reporting : Report discovered issues through GitHub IssuesCode fixes : Submit PRs to fix discovered errorsFeature improvements : Optimize performance or add new featuresDocumentation improvement : Improve documentation and usage examples
🛡️ Security Reminders ⚠️ Important Security Warning
These tools are only for legitimate security testing and research purposes:
Authorized use : Only use on systems you own or have explicit authorization to testLegal compliance : Comply with all applicable laws and regulationsResponsible disclosure : Vulnerabilities found should be disclosed responsiblyEthical use : Aim to improve security, not for malicious attacksTesting verification : Due to lack of real-machine testing, please verify functionality in secure environments first
📄 License This project is released under the MIT license.
🤝 Contributing Welcome to contribute code to improve the project:
Fork the project
Create a feature branch
Test your changes
Submit a Pull Request
Real-machine testing feedback
Bug fixes
Performance optimizations
Documentation improvements
📞 Contact For questions or suggestions, please contact through GitHub Issues.
🙏 Acknowledgments
Thanks to cyproxio
Thanks to all security tool original authors for providing these excellent security tools
Thanks to MCP protocol and FastMCP library developers
MCP for Security - Python Version | Making security tools more accessible and powerful 🚀
คะแนนในไดเรกทอรี 16/100 อยู่ในรายการ 10 จาก 10
อยู่ใน MCP Registry ทางการ 0 จาก 18
ผู้ดูแลอ้างสิทธิ์แล้ว 0 จาก 8
ตอบกลับพร้อมรายการเครื่องมือ 0 จาก 12
ดาวบน GitHub 10 จาก 16
ยอดดาวน์โหลดรายสัปดาห์ 0 จาก 10
Worldmonitor Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface Strix Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. MCP For Beginners This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for Casdoor An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Ida Pro AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP. NPM Sentinel MCP Provide AI-powered real-time analysis and intelligence on NPM packages, including security, dependencies, performance, and quality metrics. Enable faster and safer package management decisions by inte Ida Pro AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP. Hexstrike Ai HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug boun Nist Nvd Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE. GhidraMCP MCP Server for Ghidra GhidraMCP MCP Server for Ghidra ComplianceCheckup Free automated privacy grades (A+ to F) for 900+ SaaS tools, plus GDPR, HIPAA, PCI DSS, SOC 2, CCPA, and ADA compliance checklists with source citations. เซิร์ฟเวอร์ MCP หมวด Security เซิร์ฟเวอร์ MCP ที่ดีที่สุดในหมวด Security
เกี่ยวกับ MCP For Security Python 一个为主流渗透测试工具打造的MCP服务器集合。 | A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.
ยังไม่มีรายการเครื่องมือ เซิร์ฟเวอร์แบบรีโมตจะได้รายการหลังการตรวจสอบสถานะครั้งแรก
ติดตั้ง MCP For Security Python อย่างไร? คัดลอกคอนฟิก stdio สำหรับ Cursor, Claude Desktop, Claude Code หรือ VS Code ได้ในหน้านี้ คอนฟิกนี้ใช้การติดตั้งของผู้เผยแพร่ ไม่ใช่พร็อกซีของ PlugMCP
MCP For Security Python ต้องใช้ API key ไหม? ระเบียนนี้ไม่ได้ระบุตัวแปรสภาพแวดล้อมที่จำเป็น
MCP For Security Python ใช้ทรานสปอร์ตแบบใด? MCP For Security Python ทำงานแบบโลคัลผ่าน stdio
MCP For Security Python ถูกตรวจสอบล่าสุดเมื่อใด? ตรวจสอบล่าสุดเมื่อ 2026-10-27 一个为主流渗透测试工具打造的MCP服务器集合。 | A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.
เครื่องมือมีคำอธิบาย 0 จาก 6
