Skip to main content
Glama

Adversary MCP Server

by brettbergin
GitHub
Python
MIT License
OverviewInspectNewSchemaRelated ServersReviewsScore
Need Help?View Source CodeReport Issue

Adversary MCP Server

Enterprise-grade security analysis with dynamic rule management and hot-reload capabilities

Installation • Quick Start • MCP Integration • Rule Management • CLI Reference

Installation

Prerequisites

  • Python 3.10+ (3.11+ recommended)
  • Cursor IDE with MCP support
  • OpenAI API key (optional, for enhanced exploit generation)

Quick Install

pip install adversary-mcp-server

Verify Installation

adversary-mcp-cli --version adversary-mcp-cli status

Quick Start

1. Initial Setup

# Configure the security engine adversary-mcp-cli configure # Optional: Add OpenAI API key for enhanced analysis adversary-mcp-cli configure --openai-api-key sk-your-key-here # View available rules and setup adversary-mcp-cli rules stats

2. Cursor IDE Integration

Create .cursor/mcp.json in your project or ~/.cursor/mcp.json globally:

{ "mcpServers": { "adversary": { "command": "adversary-mcp-cli", "args": ["server"] } } }

3. Start Using in Cursor

Once configured, you can use these MCP tools in Cursor:

  • adv_scan_code - Scan code snippets for vulnerabilities
  • adv_scan_file - Scan individual files
  • adv_scan_directory - Scan entire directories
  • adv_list_rules - List all security rules
  • adv_get_rule_details - Get details about specific rules
  • adv_generate_exploit - Generate educational exploits
  • adv_configure_settings - Configure server settings
  • adv_get_status - Check server status
  • adv_get_version - Get version information

4. Enable Hot-Reload (Optional)

For real-time rule updates during development:

# Start hot-reload service adversary-mcp-cli watch start # Now edit rules and they'll automatically reload!

MCP Integration

Available Tools

ToolDescriptionUsage
adv_scan_codeScan source code for security vulnerabilitiesPass code content and language
adv_scan_fileScan a file for security vulnerabilitiesPass file path
adv_scan_directoryScan a directory for security vulnerabilitiesPass directory path
adv_generate_exploitGenerate exploit for a specific vulnerabilityPass vulnerability type and code context
adv_list_rulesList all available threat detection rulesOptional filters by category/severity/language
adv_get_rule_detailsGet detailed information about a specific rulePass rule ID
adv_configure_settingsConfigure server settingsPass configuration options
adv_get_statusGet server status and configurationNo parameters required
adv_get_versionGet version information of the adversary MCP serverNo parameters required

Example Usage in Cursor

# Scan a Python file for vulnerabilities Use adv_scan_file to scan app.py for security issues # Generate an exploit for SQL injection Use adv_generate_exploit for sql_injection vulnerability in this login function # List all XSS detection rules Use adv_list_rules filtered by category "xss" # Get version information Use adv_get_version to check the current version of the adversary MCP server

Rule Management

Rule Directory Structure

Rules are automatically organized in your user directory:

~/.local/share/adversary-mcp-server/rules/ ├── built-in/ # Core security rules (109 rules) │ ├── python-rules.yaml │ ├── javascript-rules.yaml │ ├── typescript-rules.yaml │ ├── web-security-rules.yaml │ ├── api-security-rules.yaml │ ├── cryptography-rules.yaml │ └── configuration-rules.yaml ├── custom/ # Your custom rules ├── organization/ # Company/team rules └── templates/ # Rule templates

Quick Rule Management

# View rules directory and contents adversary-mcp-cli show-rules-dir # List all loaded rules with source files adversary-mcp-cli list-rules # List rules with full file paths adversary-mcp-cli list-rules --verbose # View detailed rule statistics adversary-mcp-cli rules stats # Export rules for backup/sharing adversary-mcp-cli rules export my-rules.yaml # Import custom rules adversary-mcp-cli rules import-rules external-rules.yaml # Validate all rules adversary-mcp-cli rules validate # Reload rules after changes adversary-mcp-cli rules reload

Creating Custom Rules

  1. Copy template:
cp ~/.local/share/adversary-mcp-server/rules/templates/rule-template.yaml \ ~/.local/share/adversary-mcp-server/rules/custom/my-rule.yaml
  1. Edit the rule:
rules: - id: api_key_hardcode name: Hardcoded API Key description: Detects hardcoded API keys in source code category: secrets severity: critical languages: [python, javascript, typescript] conditions: - type: pattern value: "API_KEY\\s*=\\s*['\"][a-zA-Z0-9-_]{20,}['\"]" remediation: | Store API keys in environment variables: - Use os.getenv('API_KEY') instead of hardcoding - Implement proper secrets management references: - https://owasp.org/Top10/A05_2021-Security_Misconfiguration/ cwe_id: CWE-798 owasp_category: A05:2021
  1. Reload rules:
adversary-mcp-cli rules reload

Hot-Reload Service

Enable real-time rule updates without server restart:

Start Hot-Reload

# Start with default settings adversary-mcp-cli watch start # Start with custom directories and debounce time adversary-mcp-cli watch start \ --directory /path/to/project/rules/ \ --debounce 2.0

Monitor Status

# Check service status adversary-mcp-cli watch status # Test hot-reload functionality adversary-mcp-cli watch test

Development Workflow

# Terminal 1: Start hot-reload service adversary-mcp-cli watch start # Terminal 2: Edit rules (auto-reloads) vim ~/.local/share/adversary-mcp-server/rules/custom/my-rule.yaml # Changes are automatically detected and rules reload!

CLI Reference

Core Commands

CommandDescription
adversary-mcp-cli configureInitial setup and configuration
adversary-mcp-cli statusShow server status and configuration
adversary-mcp-cli scan <target>Scan files/directories for vulnerabilities
adversary-mcp-cli serverStart MCP server (used by Cursor)

Rule Management Commands

CommandDescription
adversary-mcp-cli list-rulesList all rules with source files
adversary-mcp-cli rule-details <id>Get detailed rule information
adversary-mcp-cli rules statsShow comprehensive rule statistics
adversary-mcp-cli rules export <file>Export rules to YAML/JSON
adversary-mcp-cli rules import-rules <file>Import external rules
adversary-mcp-cli rules validateValidate all loaded rules
adversary-mcp-cli rules reloadReload rules from files

Hot-Reload Commands

CommandDescription
adversary-mcp-cli watch startStart hot-reload service
adversary-mcp-cli watch statusShow service status
adversary-mcp-cli watch testTest hot-reload functionality

Utility Commands

CommandDescription
adversary-mcp-cli show-rules-dirShow rules directory location
adversary-mcp-cli demoRun interactive demo
adversary-mcp-cli resetReset all configuration

Security Coverage

Comprehensive Rule Database (109 Rules)

  • Python (20 rules): SQL injection, command injection, deserialization, path traversal
  • JavaScript/TypeScript (28 rules): XSS, prototype pollution, eval injection, CORS issues
  • Web Security (16 rules): CSRF, clickjacking, security headers, session management
  • API Security (15 rules): Authentication bypass, parameter pollution, mass assignment
  • Cryptography (15 rules): Weak algorithms, hardcoded keys, poor randomness
  • Configuration (15 rules): Debug mode, default credentials, insecure settings

Standards Compliance

  • OWASP Top 10 2021 - Complete coverage
  • CWE - Common Weakness Enumeration mappings
  • NIST - Security framework alignment
  • Industry best practices - SANS, CERT guidelines

Languages Supported

  • Python - AST-based analysis with deep pattern matching
  • JavaScript - Modern ES6+ and Node.js patterns
  • TypeScript - Type safety and framework-specific vulnerabilities

Architecture

The system uses a modular architecture with external rule management:

┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐ │ Cursor IDE │───▶│ MCP Server │───▶│ Security Engine │ │ │ │ │ │ │ │ • Code editing │ │ • adv_* tools │ │ • AST Analysis │ │ • Chat interface│ │ • Protocol │ │ • YAML Rules │ │ • Tool calling │ │ handling │ │ • Hot-reload │ └─────────────────┘ └─────────────────┘ └─────────────────┘ │ ┌─────────────────────────┼─────────────────────────┐ │ ▼ │ ┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐ │ Built-in Rules │ │ Custom Rules │ │Organization Rules│ │ (109 rules) │ │ User defined │ │ Company policies│ │ Multi-language │ │ Project specific│ │ Compliance │ └─────────────────┘ └─────────────────┘ └─────────────────┘

Advanced Usage

CI/CD Integration

# .github/workflows/security.yml name: Security Analysis on: [push, pull_request] jobs: security-scan: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - uses: actions/setup-python@v4 with: python-version: '3.11' - name: Install Adversary MCP run: pip install adversary-mcp-server - name: Security Scan run: | adversary-mcp-cli scan . \ --severity medium \ --format json \ --output security-report.json - name: Upload Results uses: actions/upload-artifact@v3 with: name: security-report path: security-report.json

Environment Configuration

# Configuration environment variables export ADVERSARY_CONFIG_DIR="~/.local/share/adversary-mcp-server" export ADVERSARY_RULES_DIR="~/.local/share/adversary-mcp-server/rules" export ADVERSARY_LOG_LEVEL="INFO" export ADVERSARY_SEVERITY_THRESHOLD="medium" export ADVERSARY_HOT_RELOAD="enabled"

Development

Development Setup

# Clone repository git clone https://github.com/brettbergin/adversary-mcp-server.git cd adversary-mcp-server # Install with uv (recommended) pip install uv uv venv source .venv/bin/activate uv pip install -e ".[dev]" # Or with traditional pip make install # Run tests make test # Code quality checks make lint

Project Structure

adversary-mcp-server/ ├── src/adversary_mcp_server/ │ ├── server.py # MCP server with adv_* tools │ ├── threat_engine.py # Rule engine with source file tracking │ ├── ast_scanner.py # Static analysis engine │ ├── exploit_generator.py # Educational exploit generation │ ├── hot_reload.py # Real-time rule updates │ └── cli.py # Command-line interface ├── rules/ # Packaged rules (copied to user directory) │ ├── built-in/ # 109 core security rules │ └── templates/ # Rule creation templates └── tests/ # Comprehensive test suite (294 tests)

License

MIT License - see LICENSE file for details.

Contributing

  1. Fork the repository
  2. Create a feature branch: git checkout -b feature-name
  3. Make your changes and add tests
  4. Run the test suite: make test
  5. Submit a pull request

Support

Built with ❤️ for secure development

This server cannot be installed

-
security - not tested
A
license - permissive license
-
quality - not tested

How are these scores calculated?

hybrid server

The server is able to function both locally and remotely, depending on the configuration or use case.

A security-focused server that integrates with Cursor IDE to provide real-time vulnerability detection, exploit generation, and security insights during software development.

  1. Installation
    1. Prerequisites
    2. Quick Install
    3. Verify Installation
  2. Quick Start
    1. Initial Setup
    2. Cursor IDE Integration
    3. Start Using in Cursor
    4. Enable Hot-Reload (Optional)
  3. MCP Integration
    1. Available Tools
    2. Example Usage in Cursor
  4. Rule Management
    1. Rule Directory Structure
    2. Quick Rule Management
    3. Creating Custom Rules
  5. Hot-Reload Service
    1. Start Hot-Reload
    2. Monitor Status
    3. Development Workflow
  6. CLI Reference
    1. Core Commands
    2. Rule Management Commands
    3. Hot-Reload Commands
    4. Utility Commands
  7. Security Coverage
    1. Comprehensive Rule Database (109 Rules)
    2. Standards Compliance
    3. Languages Supported
  8. Architecture
    1. Advanced Usage
      1. CI/CD Integration
      2. Environment Configuration
    2. Development
      1. Development Setup
      2. Project Structure
    3. License
      1. Contributing
        1. Support

          Related MCP Servers

          • AI Development Assistant MCP Server

            kleneway
            -
            security
            A
            license
            -
            quality
            An AI-powered development toolkit for Cursor providing intelligent coding assistance through advanced reasoning, UI screenshot analysis, and code review tools.
            Last updated -
            560
            240
            TypeScript
            MIT License

          • Laravel Helpers MCP

            jsonallen
            -
            security
            A
            license
            -
            quality
            A collection of Laravel helper tools for integration with Cursor IDE, providing features like log viewing, error searching, artisan command execution, and model information display directly within the editor.
            Last updated -
            1
            Python
            MIT License

          • MCP Montano Server

            lucasmontano
            -
            security
            F
            license
            -
            quality
            A TypeScript-based server project that can be integrated with Cursor IDE as an MCP (Model Control Protocol) server, enabling enhanced development capabilities.
            Last updated -
            4
            TypeScript

          • MCP Server Pentest

            9olidity
            A
            security
            A
            license
            A
            quality
            A security testing tool that enables automated vulnerability detection including XSS and SQL injection, along with comprehensive browser interaction capabilities for web application penetration testing.
            Last updated -
            12
            327
            5
            JavaScript
            MIT License

          View all related MCP servers

          New MCP Servers

          MCP directory API

          We provide all the information about MCP servers via our MCP API.

          curl -X GET 'https://glama.ai/api/mcp/v1/servers/brettbergin/adversary-mcp-server'

          If you have feedback or need assistance with the MCP directory API, please join our Discord server