# AI Security Tools MCP Server

A production-ready Model Context Protocol (MCP) server that integrates AI-powered search, browser automation, and Kali Linux security tools.

## 🚀 Features

- **AI-Powered Search** — Tavily integration for intelligent web research
- **Stealth Browsing** — SeleniumBase for undetectable web scraping
- **Modern Automation** — Playwright for reliable browser control
- **Security Scanning** — nmap, subdomain enumeration, and more
- **Tech Stack Detection** — Identify technologies running on target sites

## 🛠️ Tools Included

| Tool | Purpose |
|------|---------|
| `tavily_search` | AI-powered web search |
| `tavily_extract` | Content extraction from URLs |
| `stealth_screenshot` | Undetectable webpage screenshots |
| `playwright_screenshot` | Fast, reliable browser screenshots |
| `nmap_scan` | Port scanning with multiple modes |
| `subdomain_enum` | Subdomain discovery |
| `tech_stack_detect` | Identify site technologies |
| `whois_lookup` | Domain registration info |
| `dns_enum` | DNS record enumeration |
| `security_headers_check` | Analyze HTTP security headers |
| `ssl_scan` | SSL/TLS configuration analysis |

## 📦 Installation

```bash
# Clone the repo
git clone https://github.com/MrsPiPy/ai-security-tools-mcp.git
cd ai-security-tools-mcp

# Install dependencies
pip install mcp tavily seleniumbase playwright

# Set your Tavily API key
export TAVILY_API_KEY="your-key-here"

# Run the server
python ai_security_tools_server.py
```

## 🔧 MCP Configuration

Add to your MCP client config:

```json
{
  "mcpServers": {
    "ai-security-tools": {
      "command": "python3",
      "args": ["/path/to/ai_security_tools_server.py"]
    }
  }
}
```

## 💡 Usage Example

Ask your AI agent:
> "Run a security scan on example.com"

The AI will:
1. Call `whois_lookup` for domain info
2. Run `dns_enum` for DNS records
3. Execute `nmap_scan` for open ports
4. Use `tech_stack_detect` to identify technologies
5. Check `security_headers_check` for misconfigurations

## 📊 Real-World Results

Scanning **itechmonitoring.com** (with permission):
- ✅ Open ports identified
- ✅ Tech stack: WordPress, Apache, PHP
- ✅ Security headers analyzed
- ✅ DNS records enumerated
- **Time: 30 seconds vs 5 minutes manual**

## 🔗 Connect

- **Author:** [Tina Eid](https://github.com/MrsPiPy)
- **LinkedIn:** [AI Security Content](https://linkedin.com/in/tina-eid-85443b3a6)
- **More MCP Resources:** [StitchLab Productions](https://stitchlabproductions.tech)

## 📜 License

MIT License — Free to use, modify, and distribute.

---

*Built with 🤖 KitKat and ☕ lots of coffee*