🔐 CyberSec MCP Server

An Information Security MCP Server built with Python — demonstrating real-world infosec skills using the Model Context Protocol (MCP) to give AI assistants native cybersecurity tooling.

What is MCP?

The Model Context Protocol (MCP) is an open standard that lets you connect AI assistants (like Claude, Bob, etc.) to external tools, APIs, and data sources via a structured server protocol. This project exposes 7 professional-grade infosec tools directly inside an AI assistant.

Related MCP server: Kali Linux MCP Server

🛠️ Tools

🚀 Quick Start

Prerequisites

• Python 3.11+

• A VirusTotal API key (free tier works)

Install

git clone https://github.com/fa1829/cybersec-mcp
cd cybersec-mcp
pip install -r requirements.txt

Register in Bob / Claude Desktop

Add to your .bob/mcp.json (workspace) or ~/.bob/settings/mcp.json (global):

{
  "mcpServers": {
    "cybersec-mcp": {
      "command": "python",
      "args": ["/absolute/path/to/cybersec-mcp/server.py"],
      "env": {
        "VIRUSTOTAL_API_KEY": "<your-vt-api-key>"
      }
    }
  }
}

💡 Example Prompts

Once connected, you can ask your AI assistant things like:

• "Analyze this hash: 44d88612fea8a8f36de82e1278abb02f"

• "Check CVE-2021-44228 (Log4Shell) for me"

• "Audit the security headers on https://github.com"

• "Do a WHOIS lookup on malicious-domain.com"

• "Decode this base64 payload: SGVsbG8gV29ybGQ="

• "How strong is the password 'P@ssw0rd123'?"

• "Generate a threat report for a ransomware incident targeting our HR system"

🧠 Skills Demonstrated

• Threat Intelligence & OSINT (VirusTotal, RDAP, DNS-over-HTTPS)

• Vulnerability Research (NIST NVD, CVSS scoring)

• Defensive Security (HTTP header auditing, security grading)

• Malware Analysis tradecraft (hash identification, payload decoding)

• NIST SP 800-63b password security guidelines

• MITRE ATT&CK Framework mapping

• NIST Cybersecurity Framework (CSF) incident response

• MCP server development (Python, async, FastMCP)

📚 References

• MITRE ATT&CK

• NIST Cybersecurity Framework

• NIST SP 800-63b

• NIST NVD

• VirusTotal API

• Model Context Protocol

License

MIT — use freely, attribution appreciated.