sec-ops-mcp
Provides Linux host privilege escalation auditing, scanning for dangerous SUID/SGID binaries, capabilities, and writable scheduled tasks.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
sec-ops-mcp
SecOps MCP Server (sec-ops-mcp)
SecOps MCP is an enterprise-grade Model Context Protocol server that arms LLMs and AI agents with direct diagnostic capabilities for defensive security posture assessments, privilege escalation surface auditing, and Post-Quantum Cryptography (PQC) readiness checks.
π οΈ Integrated Tooling Modules
Module | Scope | Key Diagnostic Capabilities |
QuantumGuard | PQC & Modern Cryptography | Scans x509 cert chains for classical vs. PQC algorithms (FIPS 203/204), evaluates Shor's vulnerability risks on RSA/ECC, and probes TLS endpoints for hybrid key exchange support. |
PrivScope | Linux Privilege Surface | Identifies dangerous SUID/SGID binaries (GTFOBins mapped), unauthorized |
WinScope | Windows Privilege Surface | Audits |
Related MCP server: srv-explore
π Quickstart
Prerequisites
Python 3.10+
pip/venv
Installation
git clone [https://github.com/JoaquinHernandez/sec-ops-mcp.git](https://github.com/JoaquinHernandez/sec-ops-mcp.git)
cd sec-ops-mcp
python3 -m venv .venv
source .venv/bin/activate # On Windows: .venv\Scripts\activate
pip install -r requirements.txtβοΈ Client Integration
Add this MCP server definition to your client configuration:
Claude Desktop (claude_desktop_config.json)
{
"mcpServers": {
"secops-scanner": {
"command": "/absolute/path/to/sec-ops-mcp/.venv/bin/python",
"args": ["/absolute/path/to/sec-ops-mcp/server.py"]
}
}
}Cursor / Local MCP Agents
{
"mcpServers": {
"secops-scanner": {
"command": "python",
"args": ["./server.py"],
"cwd": "/absolute/path/to/sec-ops-mcp"
}
}
}π Available MCP Tools
scan_pqc_readiness(target_dir): Evaluates local certificate stores against NIST PQC migration guidelines.scan_tls_quantum_posture(hostname, port): Connects to TLS services to check for post-quantum hybrid key exchange suites.audit_linux_posture(deep_scan): Scans Linux hosts for SUID escalation vectors and capability leaks.audit_windows_posture(): Scans Windows registry and service tables for privilege escalation flaws.
π Security & Defense-in-Depth Notes
This MCP server is built specifically for read-only posture assessment and hardening verification. It performs passive analysis and structured reporting, enabling autonomous defensive assistants to guide engineers through remediation workflows without generating offensive payloads.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelogβ¦
This server cannot be deployed
Maintenance
Related MCP Connectors
Run verified read-only code tools: quant diagnostics + agent-ops preflight, no source exposure.
Read-only smart-contract security intelligence for autonomous agents.
LLM agent security scan: injection, jailbreak, tool abuse probes plus guardrail audit.
Context and control for any AI. Agent identity, scoped access, and proof across tools.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables authorized compliance verification and security auditing through natural language, bridging AI assistants with industry-standard security tools for enterprise audits.24-
- FlicenseNot gradedqualityDmaintenanceEnables AI agents to safely explore and diagnose remote servers by providing a read-only sandbox with controlled access to files, logs, Docker, and databases. It exposes MCP tools that allow natural-language investigation and direct command execution without write permissions.4-
- FlicenseNot gradedqualityCmaintenanceEnables local AI models to perform defensive cybersecurity analysis through narrowly scoped read-only tools for host posture, Windows security operations, file/IOC triage, code scanning, and allowlisted filesystem/network access while enforcing boundaries and audit trails.-
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to securely invoke only allowlisted, read-only tools on a local Kali Linux host over an encrypted network with OAuth2 authentication and least-privilege enforcement.2Apache 2.0