Skip to main content
Glama
NeveuGregor

mcp-noctua

by NeveuGregor
OverviewSchemaRelated ServersScoreDiscussions
Python
Local

mcp-noctua

🇬🇧 English · 🇫🇷 Français

An MCP server (stdio) that exposes a pentest toolbox to a strong LLM orchestrator (Claude Code, interactive), to run authorized security audits.

A clean rewrite inspired by the Darkmoon MCP (GPL v3) with no code copied → CeCILL-B license, zero GPL debt. What's reused is the toolbox (sqlmap, nuclei, ffuf, httpx, naabu, katana, whatweb…); the fragile orchestration (opencode + local model) is dropped and replaced by a strong brain that verifies.

Architecture

[Claude Code] --stdio--> [mcp-noctua (host)] --docker.sock--> [darkmoon container = toolbox]
   (the brain)             (controlled gateway)               (sqlmap, nuclei, ffuf…)

mcp-noctua reuses the darkmoon container (ascit/darkmoon:latest) as its toolbox, invoking it via docker.sock. Invoking tools inside a container is not a derivative work → no license concern. The container is kept alive; noctua starts it if it's stopped before a run.

Related MCP server: Kali MCP Pentest Server

Exposed MCP tools

Tool

Role

run_tool(command, timeout?)

Run a whitelisted tool in the toolbox.

web_crawl(url, depth?, timeout?)

Bounded crawl (katana).

port_scan(target, ...)

naabu + httpx, bounded.

vuln_scan(url, tags?)

nuclei, bounded.

list_tools()

Tools available in the toolbox.

health()

Toolbox container state (running / started / not found).

Guard-rails

  • Strict allow-list of tools; dangerous patterns blocked (rm -rf, fork bomb, exfil…).

  • A timeout that actually kills the process inside the toolbox (fixes the Darkmoon flaw).

  • Authorized testing only; the operator validates every target.

Configuration (.env)

See .env.example. Keys: DOCKER_CONTAINER_NAME, NOCTUA_TIMEOUT, NOCTUA_REPORTS_DIR, NOCTUA_COMPOSE_DIR, DEBUG.

Install

git clone https://github.com/NeveuGregor/mcp-noctua.git
cd mcp-noctua
python3 -m venv venv && source venv/bin/activate
pip install -e ".[dev]"
cp .env.example .env   # adjust as needed
pytest

Register in ~/.claude.json as a stdio MCP server: venv/bin/python -m src.main (cwd = mcp-noctua).

License

CeCILL-B — see LICENSE.

Install Server
F
license - not found
A
quality
A
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
1Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

Related MCP Servers

  • Kali MCP Server

    DurkDiggler
    -
    license
    -
    quality
    -
    maintenance
    Enables LLMs to execute common security testing tools like nmap, sqlmap, hydra, and metasploit through a secure Docker container. Provides controlled access to penetration testing utilities with configurable timeouts and tool discovery capabilities.

  • Kali MCP Pentest Server

    andrew-stclair
    F
    license
    -
    quality
    B
    maintenance
    Enables users to perform security testing and penetration testing tasks through a Docker-based API that provides access to popular security tools like nmap, nikto, sqlmap, wpscan, dirb, and searchsploit. Designed for educational purposes with input sanitization and non-root execution for safer pentesting workflows.

  • ikaliMCP Server

    whobcode
    F
    license
    -
    quality
    C
    maintenance
    Provides a secure interface for AI assistants to interact with penetration testing tools like nmap, hydra, sqlmap, and nikto for educational cybersecurity purposes. Includes input sanitization and runs in a Docker container with Kali Linux tools for authorized testing scenarios.

  • Kali MCP Server

    azza39925
    F
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to perform authorized penetration testing and security assessments by exposing 20+ Kali Linux security tools (nmap, sqlmap, gobuster, hydra, etc.) through a safe, validated interface with command allowlists, rate limiting, and input sanitization.
    19
    1

View all related MCP servers

Related MCP Connectors

  • SentinelX

    Operate your Linux servers from your LLM. Every action runs through an auditable allowlist.

  • Oakallow

    Runtime permission, approval, and audit layer for AI agent tool execution.

  • mcp-server

    MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/NeveuGregor/mcp-noctua'

If you have feedback or need assistance with the MCP directory API, please join our Discord server