Skip to main content
Glama

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault

No arguments

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": false
}
prompts
{
  "listChanged": false
}
resources
{
  "subscribe": false,
  "listChanged": false
}
experimental
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
check_scopeA

Check whether target is authorized in scope.yaml before running any red-team tool.

nmap_scanC

Run an nmap scan against target (profile: quick|full_tcp|service|udp). Refuses if target not in scope.yaml.

gobuster_dirC

Directory-brute-force url with gobuster. Refuses if the host is not in scope.yaml.

nikto_scanB

Run a nikto web vulnerability scan against target:port. Refuses if target not in scope.yaml.

hydra_bruteforceA

Credential brute-force target/service with hydra using local userlist/passlist files. Requires confirm=True as an explicit double opt-in, and target must be in scope.yaml.

audit_listening_portsA

List listening ports (ss -tulnp) cross-referenced with firewall rules on this local host.

audit_suid_world_writableA

Find SUID and world-writable files under paths (default /usr /etc /opt /home) on this local host.

review_auth_logC

Summarize sshd auth log entries on this local host since since.

lint_ssh_configA

Check sshd_config at path against a baseline hardening ruleset on this local host.

list_installed_toolsA

Inventory installed BlackArch security-tool packages, grouped by category (recon, exploitation, cracking, etc.).

audit_pacman_packagesA

Report orphan packages, available updates, and package integrity via pacman (read-only) on this local host.

crack_hash_offlineB

Run an offline password-strength audit with hashcat/john against a hash file placed in data/hashes/.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Pusparaj99op/blackarch-AI'

If you have feedback or need assistance with the MCP directory API, please join our Discord server