Skip to main content
Glama

Xray MCP Server

by zhangning77-tech
GitHub
Python
OverviewInspectNewEndpointsSchemaRelated ServersReviewsScore
Need Help?View Source CodeReport Issue

Xray MCP Server

This is an enhanced MCP (Model Context Protocol) server that provides xray vulnerability scanning capabilities for ModelScope hosting.

Features

  • xray_scan: Perform vulnerability scans on target URLs
    • Support for basic-crawler and phantasm-crawler scan types
    • Configurable timeout
    • Plugin and POC support
    • JSON output with detailed results
  • xray_version: Get xray version information
  • xray_start_proxy: Start xray in passive proxy mode (planned)
    • Configurable proxy port
    • Real-time vulnerability detection
  • xray_stop_proxy: Stop the running xray proxy (planned)
  • xray_service_scan: Scan services on non-HTTP targets (planned)
    • Port range scanning
    • Service detection

Installation

  1. Install Python 3.7+
  2. Install xray from https://github.com/chaitin/xray
  3. Set the XRAY_PATH environment variable to point to your xray binary:
    export XRAY_PATH=/path/to/xray

Configuration

Environment variables:

  • XRAY_PATH: Path to xray binary (default: "xray")
  • XRAY_CONFIG_DIR: Configuration directory (default: "~/.xray-mcp")
  • XRAY_OUTPUT_DIR: Output directory for scan results (default: system temp)

Usage

For ModelScope MCP

This server is designed to work with ModelScope's MCP platform. The server implements the MCP protocol and can be integrated into the ModelScope ecosystem.

Standalone Usage

Run the server:

python server.py

The server reads JSON-RPC requests from stdin and writes responses to stdout.

Example Request

{ "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "xray_scan", "arguments": { "target": "http://example.com", "scan_type": "basic-crawler", "timeout": 300 } } }

Available Tools

xray_scan

Performs a vulnerability scan on a target URL.

Parameters:

  • target (required): The target URL to scan
  • scan_type (optional): Type of scan - "basic-crawler" or "phantasm-crawler" (default: "basic-crawler")
  • timeout (optional): Scan timeout in seconds (default: 300)
  • plugins (optional): Comma-separated list of plugins to use
  • poc (optional): POC to use for scanning

xray_version

Gets the version information of the installed xray scanner.

No parameters required.

xray_start_proxy (Planned)

Starts xray in passive proxy mode for real-time scanning.

Parameters:

  • port (optional): Proxy port to listen on (default: 7777)

xray_stop_proxy (Planned)

Stops the running xray proxy.

No parameters required.

xray_service_scan (Planned)

Scans services on non-HTTP targets.

Parameters:

  • target (required): The target host/IP to scan
  • port_range (optional): Port range to scan (default: "1-65535")
  • timeout (optional): Scan timeout in seconds (default: 300)

Security Considerations

  • The server executes xray with user-provided URLs
  • Implement appropriate access controls when deploying
  • Consider rate limiting for production use
  • Validate and sanitize all inputs

License

MIT License

This server cannot be installed

-
security - not tested
F
license - not found
-
quality - not tested

How are these scores calculated?

hybrid server

The server is able to function both locally and remotely, depending on the configuration or use case.

Enables vulnerability scanning of web applications using the xray security scanner. Provides URL scanning capabilities with configurable crawlers, plugins, and POCs to detect security vulnerabilities through natural language interactions.

  1. Features
    1. Installation
      1. Configuration
        1. Usage
          1. For ModelScope MCP
          2. Standalone Usage
          3. Example Request
        2. Available Tools
          1. xray_scan
          2. xray_version
          3. xray_start_proxy (Planned)
          4. xray_stop_proxy (Planned)
          5. xray_service_scan (Planned)
        3. Security Considerations
          1. License

            Related MCP Servers

            • MCP Webscan Server

              bsmi021
              A
              security
              A
              license
              A
              quality
              Enables web content scanning and analysis by fetching, analyzing, and extracting information from web pages using tools like page fetching, link extraction, site crawling, and more.
              Last updated -
              6
              11
              MIT License

            • Trivy Security Scanner MCP Server

              norbinsh
              -
              security
              A
              license
              -
              quality
              Provides Trivy security scanning capabilities through a standardized interface, allowing users to scan projects for vulnerabilities and automatically fix them by updating dependencies.
              Last updated -
              10
              MIT License
              • Apple

            • MCP Server Pentest

              9olidity
              A
              security
              A
              license
              A
              quality
              A security testing tool that enables automated vulnerability detection including XSS and SQL injection, along with comprehensive browser interaction capabilities for web application penetration testing.
              Last updated -
              12
              685
              19
              MIT License

            • MCP Vulnerability Management System

              nesirat
              -
              security
              A
              license
              -
              quality
              A comprehensive system that helps organizations track, manage, and respond to security vulnerabilities effectively through features like vulnerability tracking, user management, support tickets, API key management, and SSL certificate management.
              Last updated -
              MIT License

            View all related MCP servers

            New MCP Servers

            MCP directory API

            We provide all the information about MCP servers via our MCP API.

            curl -X GET 'https://glama.ai/api/mcp/v1/servers/zhangning77-tech/xray-mcp'

            If you have feedback or need assistance with the MCP directory API, please join our Discord server