Which integrations are available for this server?

Provides a WordPress vulnerability scanner that checks plugins, themes, users, and known CVEs.

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@bolt Run an nmap scan on example.com" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

bolt

by AgeofAITech

Overview Schema Source Related Servers Discussions Admin

TypeScript

Remote

Bolt

Plugin-based security tool server via MCP. Each tool is a plugin — all directly callable in a single LLM turn.

Quick Start

# Docker (recommended)
curl -fsSL https://bolt.cyberstrike.io/install.sh | sudo sh

# Or manually
docker run -d --name bolt -p 3001:3001 \
  -e MCP_ADMIN_TOKEN=$(openssl rand -hex 32) \
  --cap-add NET_RAW --cap-add NET_ADMIN \
  -v bolt-data:/data \
  ghcr.io/cyberstrikeus/bolt:latest

Related MCP server: Kali MCP Server

Architecture

Bolt supports two types of tools: native plugins (TypeScript, runs in-process) and MCP servers (external processes connected via stdio or HTTP).

bolt/
├── packages/
│   ├── core/              # MCP server, plugin loader, mcp-client, executor
│   ├── plugins/           # Native bolt plugins
│   │   ├── subfinder/
│   │   ├── nmap/
│   │   ├── nuclei/
│   │   ├── httpx/
│   │   ├── ffuf/
│   │   └── run-command/
│   └── mcp-servers/       # External MCP servers (stdio, aggregated at runtime)
│       ├── alterx-mcp/
│       ├── amass-mcp/
│       ├── sqlmap-mcp/
│       └── ...            # Add your own here
├── bolt.config.json       # Plugins + mcpServers configuration
├── Dockerfile             # Production: Ubuntu 24.04 + all binaries
├── Dockerfile.dev         # Dev base image (binaries only, no mcp-servers)
├── docker-compose.yml     # Production
└── docker-compose.dev.yml # Development (fast iteration)

Tool loading flow:

bolt.config.json
  ├── plugins[]     → loaded as native TypeScript plugins
  └── mcpServers{}  → each spawned as stdio subprocess, tools aggregated

mcpServers entries in bolt.config.json follow the standard MCP config format:

{
  "mcpServers": {
    "my-tool": {
      "command": "node",
      "args": ["/app/packages/mcp-servers/my-tool/build/index.js", "/usr/local/bin/my-tool"]
    },
    "remote-api": {
      "url": "https://my-mcp-server.com/mcp",
      "headers": { "Authorization": "Bearer xxx" }
    }
  }
}

Tool names are automatically namespaced as {serverName}_{toolName} to avoid conflicts.

Tools (33)

Tool	Category	Type	Description
`subfinder`	Recon & OSINT	Plugin	subfinder MCP server — passive subdomain enumeration via 40+ sources (Shodan, VirusTotal, crt.sh, and more)
`assetfinder`	Recon & OSINT	MCP	assetfinder MCP server — fast passive subdomain discovery using certificate transparency and web archives
`amass`	Recon & OSINT	MCP	amass MCP server — deep OSINT-driven subdomain enumeration with DNS and scraping techniques
`crtsh`	Recon & OSINT	MCP	crt.sh MCP server — certificate transparency log lookup to find subdomains via issued TLS certificates
`waybackurls`	Recon & OSINT	MCP	waybackurls MCP server — extract archived URLs from Wayback Machine to surface old endpoints and forgotten parameters
`dnsx_resolve`	DNS	MCP	dnsx MCP server — bulk DNS resolution for A, MX, NS, TXT, CNAME, PTR records; infrastructure mapping and DNS takeover detection
`alterx`	DNS	MCP	alterx MCP server — subdomain permutation and wordlist generation based on patterns and input domains
`shuffledns`	DNS	MCP	shuffledns MCP server — wildcard-aware subdomain bruteforce using massdns for high-speed resolution
`nmap`	Port Scanning	Plugin	nmap MCP server — port scanning with service detection, OS fingerprinting, and NSE script support
`rustscan`	Port Scanning	MCP	rustscan MCP server — ultra-fast port scanner that discovers all open ports in seconds, then passes results to nmap for service detection
`masscan`	Port Scanning	MCP	masscan MCP server — internet-scale TCP port scanning at up to 10 million packets per second
`httpx`	Web Discovery	Plugin	httpx MCP server — HTTP probing with status codes, titles, tech fingerprinting, and response analysis
`katana`	Web Discovery	MCP	katana MCP server — fast web crawler for endpoint and JavaScript file discovery
`ffuf`	Web Discovery	Plugin	ffuf MCP server — directory, file, and virtual host fuzzing with flexible wordlist support
`gobuster`	Web Discovery	MCP	gobuster MCP server — directory/file brute force and DNS subdomain enumeration to discover hidden paths, admin panels, and subdomains
`arjun`	Web Discovery	MCP	arjun MCP server — hidden HTTP parameter discovery for GET, POST, JSON, and XML endpoints
`nuclei`	Vuln Scanning	Plugin	nuclei MCP server — template-based vulnerability scanner for CVEs, misconfigurations, exposed panels, and default credentials
`nuclei_update_templates`	Vuln Scanning	Plugin	nuclei MCP server — update nuclei templates to the latest community release
`wpscan`	Vuln Scanning	MCP	wpscan MCP server — WordPress vulnerability scanner for plugins, themes, users, and known CVEs
`sslscan`	Vuln Scanning	MCP	sslscan MCP server — SSL/TLS analysis for weak ciphers, expired certificates, BEAST, POODLE, and Heartbleed
`http_headers_analyze`	Vuln Scanning	MCP	http-headers MCP server — HTTP security headers audit for missing CSP, HSTS, X-Frame-Options, and more
`sqlmap`	Exploitation	MCP	sqlmap MCP server — automated SQL injection detection and exploitation with database enumeration
`commix`	Exploitation	MCP	commix MCP server — OS command injection testing for web applications
`smuggler`	Exploitation	MCP	smuggler MCP server — HTTP request smuggling detection for CL.TE, TE.CL, and TE.TE variants
`hydra`	Credential Attacks	MCP	hydra MCP server — fast parallel network login brute forcer for SSH, FTP, RDP, SMB, HTTP forms, and 50+ protocols
`medusa`	Credential Attacks	MCP	medusa MCP server — massively parallel network login brute forcer excelling at multi-host attacks across a subnet
`kerbrute`	Credential Attacks	MCP	kerbrute MCP server — Active Directory username enumeration and password spraying via Kerberos pre-authentication
`hashcat`	Password Cracking	MCP	hashcat MCP server — world's fastest password cracker supporting 300+ hash types with dictionary, mask, and rule-based attacks
`john`	Password Cracking	MCP	john MCP server — John the Ripper password cracker with auto hash-type detection for /etc/shadow, Windows SAM, zip files, and SSH keys
`impacket`	Active Directory	MCP	impacket MCP server — AD attack suite: secretsdump, Kerberoasting, AS-REP Roasting, remote execution, and RID enumeration
`cero`	TLS Recon	MCP	cero MCP server — extract subdomains from TLS certificate Subject Alternative Names
`scoutsuite`	Cloud Security	MCP	scoutsuite MCP server — multi-cloud security posture audit for AWS, GCP, and Azure
`run_command`	Utilities	Plugin	run-command MCP server — execute any shell command inside the container

Development

bun install
bun run dev          # HTTP server on :3001
bun run dev:stdio    # Stdio transport

MCP Server Development with Docker

When adding new MCP servers to packages/mcp-servers/, doing a full production Docker build every time is slow. Use the dev workflow instead:

Step 1 — Build the dev base image (once)

docker build -f Dockerfile.dev -t bolt:dev .

This installs all binaries (Go tools, Python, Ruby, system tools) and bolt's core. Takes ~10 minutes, but only needs to be done once (or when a new binary is added).

Step 2 — Start the dev container

docker compose -f docker-compose.dev.yml up

On every start, the container:

Builds all MCP servers in packages/mcp-servers/ from the mounted volume
Starts bolt with all tools loaded

Step 3 — Add a new MCP server

# 1. Add source to packages/mcp-servers/
mkdir -p packages/mcp-servers/my-tool/src

# 2. Add entry to bolt.config.json mcpServers
# 3. Restart — only the new server gets built (~30s)
docker compose -f docker-compose.dev.yml restart

packages/mcp-servers/ and bolt.config.json are mounted as volumes — changes on the host are reflected immediately on restart without rebuilding the image.

Writing Plugins

import { z } from "zod"
import type { PluginDef, ToolContext, ToolResult } from "@cyberstrike-io/bolt"

export const plugin: PluginDef = {
  name: "my-tool",
  version: "0.1.0",
  tools: [{
    name: "my_tool",
    description: "Does something useful",
    schema: {
      target: z.string().describe("Target to scan"),
    },
    execute: async (args, ctx) => {
      const r = await ctx.exec("my-tool", [args.target])
      return { content: [{ type: "text", text: r.stdout }] }
    },
  }],
  check: async () => {
    // Return whether the binary is installed
    const p = Bun.spawn(["which", "my-tool"], { stdout: "pipe" })
    return { installed: (await p.exited) === 0 }
  },
}

Add to bolt.config.json:

{ "plugins": ["@cyberstrike-io/bolt-my-tool"] }

Writing MCP Servers

Any stdio-based MCP server can be added to bolt. Create a new directory under packages/mcp-servers/:

// packages/mcp-servers/my-tool/src/index.ts
import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js"
import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
import { z } from "zod"
import { spawn } from "child_process"

const args = process.argv.slice(2)
const binaryPath = args[0]

const server = new McpServer({ name: "my-tool", version: "1.0.0" })

server.tool(
  "do-my-tool",
  "Description of what this tool does",
  {
    target: z.string().describe("Target to scan"),
  },
  async ({ target }) => {
    const proc = spawn(binaryPath, [target])
    let output = ""
    proc.stdout.on("data", (d) => { output += d.toString() })
    proc.stderr.on("data", (d) => { output += d.toString() })
    return new Promise((resolve) => {
      proc.on("close", () => resolve({
        content: [{ type: "text", text: output }]
      }))
    })
  }
)

const transport = new StdioServerTransport()
await server.connect(transport)

// packages/mcp-servers/my-tool/package.json
{
  "name": "my-tool",
  "version": "1.0.0",
  "scripts": { "build": "tsc" },
  "dependencies": { "@modelcontextprotocol/sdk": "^1.26.0", "zod": "^3.22.0" },
  "devDependencies": { "typescript": "^5.0.0", "@types/node": "^22.0.0" }
}

{
  "mcpServers": {
    "my-tool": {
      "command": "node",
      "args": ["/app/packages/mcp-servers/my-tool/build/index.js", "/usr/local/bin/my-tool"]
    }
  }
}

Security

Ed25519 client pairing (no shared secrets)
Middleware pipeline: rate limiting, connection throttling, request validation
Optional TLS
All tool executions logged

License

AGPL-3.0-only

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive

ResponsivenessNo issues

Resources

Need Help?

Related Servers

Related MCP Connectors

Singularity - MCP Discovery & Security Gateway AOAuth
io.github.gaurav-kumar-sinha-060705
Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring
Security Developer Tools
511
hyperion
com.thetempleofdoom.hyperion
Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.
Browser Automation Penetration Testing Research & Data
1
MCP FortressOAuth
io.github.mcp-fortress
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Security Testing & QA Tools Penetration Testing
2
mcp-server
com.pentest-tools
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
Penetration Testing Security
23

Related MCP Servers

Kali MCP Server
Penetration Testing Security Autonomous Agents
DurkDiggler
F
license
Not graded
quality
D
maintenance
Enables LLMs to execute Kali Linux security tools like nmap, sqlmap, and hydra in a secure, sandboxed environment. Provides both MCP and HTTP API interfaces for penetration testing and security assessment tasks.
Updated a year ago (2025-09-14 01:18 UTC)
-
Kali MCP Server
Penetration Testing Security Command Line
letchupkt
A
license
Not graded
quality
Not graded
maintenance
Enables AI assistants to execute penetration testing commands and security tools on Kali Linux remotely. Supports automated reconnaissance, vulnerability scanning, and CTF solving through integration with 25+ offensive security tools like nmap, gobuster, and nuclei.
Updated 10 months ago (2025-11-09 14:20 UTC)
16
-
Kali Linux MCP Server
Penetration Testing Security Command Line
ofryma
A
license
Not graded
quality
D
maintenance
Enables AI assistants to perform penetration testing and security assessments by exposing 60+ Kali Linux security tools including network scanning, web security testing, password cracking, exploitation frameworks, and OSINT capabilities through an AI-friendly interface.
Updated 10 months ago (2025-11-19 07:56 UTC)
2
MIT
Hercules MCP
Penetration Testing Shell Access
0xMihirK
A
license
A
quality
B
maintenance
Enables AI agents to perform professional penetration testing through a containerized Kali Linux environment, exposing industry-standard offensive security tools as structured MCP tools.
Updated 9 days ago (2026-09-10 10:58 UTC)
45
4
MIT