Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@mcp-security-server Scan host 192.168.1.1 for open ports"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Professional production-grade MCP Server for security assessment. Powered by Model Context Protocol, built for Kali Linux.
A professional Model Context Protocol (MCP) Server that provides AI agents with standardized security scanning capabilities. Designed for authorized security assessments with strict compliance controls.
7-Step Mandatory Flow — Every tool follows: param validation → security filtering → boundary checks → business logic → result packaging → exception capture → logging
Zero Command Injection — All shell calls use parameter arrays, never string concatenation
Mandatory Authorization — legal_authorized=true required for all scan operations
8 CVE Verification — Log4Shell, Spring4Shell, Apache Path Traversal, HTTP/2 Rapid Reset, and more
Standardized Output — Unified JSON response: code/msg/target/vuln_list/risk_level/cvss_score/suggest
Professional Logging — Timestamped logs with task IDs, scan trails, and audit records
Related MCP server: AgentAudit
mcp-security-server/
├── server.py # MCP Server Entry Point
├── core/ # Business Logic Layer
│ ├── scanner.py # Scanning Engine (6 tools, 37KB)
│ ├── result.py # Unified Response Builder
│ ├── analyzer.py # CVSS 3.1 Scoring & Vulnerability DB
│ └── reporter.py # Multi-format Report Generator
├── utils/ # Infrastructure Layer
│ ├── executor.py # Safe Command Executor (Parameter Arrays)
│ ├── validator.py # Parameter Validation & Whitelist
│ ├── logger.py # Professional Logging System
│ └── env.py # Kali Environment Detection
└── requirements.txt # Dependencies# Python packages
pip3 install mcp pydantic
# System tools (Kali Linux)
sudo apt update && sudo apt install -y nmap curlcd mcp-security-server
python3 server.pyAdd to your MCP client configuration (e.g., Claude Desktop, opencode):
{
"mcpServers": {
"mcp-security-scanner": {
"command": "python3",
"args": ["/path/to/mcp-security-server/server.py"]
}
}
}Tool | Description | Required Params |
| Host alive detection (ICMP + TCP SYN) | target, legal_authorized |
| Port scanning (SYN/Connect) | target, legal_authorized |
| Service version detection | target, legal_authorized |
| Web vulnerability scanning | target, legal_authorized |
| CVE POC verification | target, legal_authorized, cve_id |
| Security report generation | target, legal_authorized, scan_data |
| Environment & dependency check | (none) |
{
"target": "192.168.1.1",
"legal_authorized": true,
"timeout": 15
}{
"target": "192.168.1.1",
"legal_authorized": true,
"ports": "80,443,8080,8443",
"scan_type": "syn"
}{
"target": "192.168.1.1",
"legal_authorized": true,
"cve_id": "CVE-2021-44228",
"port": 8080
}{
"target": "192.168.1.1",
"legal_authorized": true,
"scan_data": "{\"vuln_list\":[...],\"suggest\":[...]}",
"format_type": "html"
}CVE | Name | CVSS | Verification Method |
CVE-2021-44228 | Log4Shell | 10.0 | Java service detection |
CVE-2022-22965 | Spring4Shell | 9.8 | Spring/Tomcat detection |
CVE-2023-22515 | Confluence Privilege | 10.0 | Setup endpoint check |
CVE-2022-26134 | Confluence OGNL | 9.8 | Confluence detection |
CVE-2021-41773 | Apache Path Traversal | 7.5 | Path traversal test |
CVE-2021-42013 | Apache Path Traversal 2 | 7.5 | Path traversal test |
CVE-2023-44487 | HTTP/2 Rapid Reset | 7.5 | HTTP/2 support check |
CVE-2021-3449 | OpenSSL NULL deref | 5.9 | Version detection |
{
"code": 0,
"msg": "success",
"target": "192.168.1.1",
"status": "completed",
"scan_data": { ... },
"vuln_list": [
{
"vuln_id": "CVE-2021-44228",
"vuln_name": "Log4Shell",
"cve_id": "CVE-2021-44228",
"cvss_score": 10.0,
"risk_level": "Critical",
"confidence": "Suspected",
"description": "Apache Log4j2 RCE",
"evidence": "Java service detected",
"remediation": "Upgrade Log4j to 2.17.0+"
}
],
"risk_level": "critical",
"cvss_score": 10.0,
"suggest": ["URGENT: Fix critical vulnerability immediately"],
"task_id": "TASK-20260822100000-a1b2c3d4",
"timestamp": "2026-08-22T10:00:00",
"duration": 12.34
}Logs are automatically saved to log/ directory:
Log File | Purpose |
| General operations |
| Scan activities |
| Errors & exceptions |
| Security audit trail |
This tool is designed for:
Security assessments with written authorization
Internal security team vulnerability verification
Security research and education
PROHIBITED: Unauthorized scanning, data theft, system damage
MIT License - Authorized security testing only
This server cannot be deployed
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.
