MCP serverSafeAuth & securitySome setup

mcp-security-hub

FuzzingLabs · FuzzingLabs/mcp-security-hub

A collection of 38 Dockerized MCP servers offering 300+ offensive security tools like Nmap and Ghidra, enabling AI agents to perform security assessments.

A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

797 stars102License: MITUpdated 6 months ago0 opens

Preview

▍

What you can do with it

Enable your Claude agent to run Nmap scans for network reconnaissance.
Use AI to perform automated vulnerability scanning on web applications with tools like Nuclei.
Integrate various offensive security tools into your AI assistant's capabilities for testing and analysis.

Safety check

Safe

No risky patterns found in the files we scanned.

Automated scan of the repo files. Always review code you run.

From the README

Offensive Security MCP Servers

Production-ready, Dockerized MCP (Model Context Protocol) servers for offensive security tools. Enable AI assistants like Claude to perform security assessments, vulnerability scanning, and binary analysis.

Features

38 MCP Servers covering reconnaissance, web security, binary analysis, blockchain security, cloud security, code security, secrets detection, threat intelligence, OSINT, Active Directory, fuzzing, and more
300+ Security Tools accessible via natural language through Claude or other MCP clients
Production Hardened - Non-root containers, minimal images, Trivy-scanned
Docker Compose orchestration for multi-tool workflows
CI/CD Ready with GitHub Actions for automated builds and security scanning

Quick Start

# Clone the repository
git clone https://github.com/FuzzingLabs/mcp-security-hub
cd mcp-security-hub

# Build all MCP servers
docker-compose build

# Start specific servers
docker-compose up nmap-mcp nuclei-mcp -d

# Verify health
docker-compose ps

Configure Claude Desktop / Claude Code

Important: You must build the images first with docker-compose build before using them.

Copy the example config to your Claude Desktop configuration:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json

Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "nmap": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "--cap-add=NET_RAW", "nmap-mcp:latest"]
    },
    "nuclei": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "nuclei-mcp:latest"]
    },
    "gitleaks": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "-v", "/path/to/repos:/app/target:ro", "gitleaks-mcp:latest"]
    },
    "radare2": {
      "command": "docker",
      "args": ["run", "-i", "--rm", "-v", "/path/to/binaries:/samples:ro", "radare2-mcp:latest"]
    }
  }
}

For project-level config, copy .mcp.json to your project root. See examples/ for full configuration templates with all MCPs and volume mount patterns.

Available MCP Servers

Reconnaissance (8 servers)

Server	Tools	Description
nmap-mcp	8	Port scanning, service detection, OS fingerprinting, NSE scripts
shodan-mcp	-	Wrapper for official Shodan MCP
pd-tools-mcp	-	Wrapper for ProjectDiscovery tools (subfinder, httpx, katana)
whatweb-mcp	5	Web technology fingerprinting and CMS detection
masscan-mcp	6	High-speed port scanning for large networks
zoomeye-mcp	-	Wrapper for ZoomEye MCP - Cyberspace search engine
networksdb-mcp	4	IP/ASN/DNS lookups via NetworksDB
externalattacker-mcp	6	Attack surface mapping with ExternalAttacker

Web Security (6 servers)

Server	Tools	Description
nuclei-mcp	7	Template-based vulnerability scanning with 8000+ templates
sqlmap-mcp	8	SQL injection detection and exploitation
nikto-mcp	-	Wrapper for Nikto MCP web server scanner
ffuf-mcp	9	Web fuzzing for directories, files, parameters, and virtual hosts
waybackurls-mcp	3	Fetch historical URLs from Wayback Machine for reconnaissance
burp-mcp	-	Wrapper for official Burp Suite MCP

Binary Analysis (6 servers)

Server	Tools	Description
radare2-mcp	32	Wrapper for official radare2-mcp - disassembly, decompilation
binwalk-mcp	6	Firmware analysis, signature scanning, extraction
yara-mcp	7	Pattern matching for malware classification
capa-mcp	5	Capability detection in executables
ghidra-mcp	-	Wrapper for pyghidra-mcp - Headless AI-powered reverse engineering
ida-mcp	-	Wrapper for ida-pro-mcp - IDA Pro integration

Blockchain Security (3 servers)

Server	Tools	Description
daml-viewer-mcp	1	DAML access-control table generation and run tracking
medusa-mcp	4	High-performance smart contract fuzzer for Solidity
solazy-mcp	8	Solana sBPF static analysis and reverse engineering

Cloud Security (3 servers)

Server	Tools	Description
trivy-mcp	7	Container, filesystem, and IaC vulnerability scanning
prowler-mcp	6	AWS/Azure/GCP security auditing and compliance
roadrecon-mcp	6	Azure AD enumeration via RoadRecon

Secrets Detection (1 server)

Server	Tools	Description
gitleaks-mcp	5	Fi

View source on GitHub