Skip to main content
Glama
kalala252

asm-mcp-server

by kalala252

asm-mcp-server

这是一个用于从MCP客户端使用asm-agent的本地服务器。连接的LLM可以将公开信息的收集、已保存结果的引用、依据的确认作为MCP工具执行。

该服务器本身不调用LLM API。对话和摘要使用MCP客户端侧的模型。

必要条件

  • Python 3.12或更高版本

  • uv

  • 单独设置的asm-agent

  • 支持MCP的LLM客户端

Related MCP server: groundwork

设置

asm-agentasm-mcp-server放在不同的文件夹中,并分别准备各自的依赖关系。

cd /absolute/path/to/asm-agent
uv sync

cd /absolute/path/to/asm-mcp-server
uv sync

使用Shodan时,请在asm-agent侧保存API密钥。

cd /absolute/path/to/asm-agent
uv run asm-agent credentials set-shodan

注册到MCP客户端

将以下内容添加到MCP客户端的设置中。请全部使用绝对路径指定。

{
  "mcpServers": {
    "passive-attack-surface": {
      "command": "/absolute/path/to/uv",
      "args": [
        "--directory",
        "/absolute/path/to/asm-mcp-server",
        "run",
        "asm-mcp-server"
      ],
      "env": {
        "ASM_AGENT_EXECUTABLE": "/absolute/path/to/asm-agent/.venv/bin/asm-agent",
        "ASM_MCP_REPORT_DIR": "/absolute/path/to/asm-mcp-server/reports"
      }
    }
  }
}

注册后,重新启动或重新连接MCP客户端。

在Windows中,请在command中指定uv.exe的绝对路径,并以以下格式指定ASM_AGENT_EXECUTABLE

C:\absolute\path\to\asm-agent\.venv\Scripts\asm-agent.exe

对话示例

example.comをShodanありで調査して、見つかったホスト名、IPアドレス、公開ポート、CVE候補を根拠付きでまとめて。

可用工具

工具

内容

scan_domain

收集并保存域名的公开信息

list_reports

返回已保存报告的列表

get_report_summary

返回收集数量、警告、错误

list_assets

返回主机名、IP地址、公开服务

get_evidence

返回信息来源和观测日期时间

list_vulnerabilities

返回Shodan的CVE候选、产品、版本

返回列表的工具可以通过offsetlimit进行分页获取。

设置

环境变量

默认值

内容

ASM_AGENT_EXECUTABLE

PATH上的asm-agent

要执行的asm-agent的绝对路径

ASM_MCP_REPORT_DIR

./reports

报告保存位置

ASM_MCP_SCAN_TIMEOUT_SECONDS

600

等待一次调查的最大秒数

Shodan的CVE是基于过去观测的候选,并不证明当前仍然存在漏洞。

开发

uv run ruff check .
uv run mypy src
uv run pytest

许可证

MIT License

A
license - permissive license
Not graded
quality - not tested
C
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    A
    quality
    C
    maintenance
    Provides AI agents with 37 OSINT tools and 12 data sources to perform unified reconnaissance, domain analysis, and attack surface mapping. It enables agents to query, correlate, and reason across platforms like Shodan, VirusTotal, and Censys in parallel.
    37
    681
    44
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to perform grounded web research with injection resistance, claim verification, and cost-aware routing through MCP tools like web_search, fetch_url, extract_claims, and check_grounding.
    MIT
  • A
    license
    B
    quality
    A
    maintenance
    MCP search and evidence tool for AI agents. Rewrites queries, zooms into source domains, and returns sourced answers with metrics.
    1
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables LLMs to perform OSINT link-analysis by exposing transforms (DNS, WHOIS, Shodan, etc.) as MCP tools for autonomous investigation and graph enrichment.
    MIT

View all related MCP servers

Related MCP Connectors

  • Web research for agents: quality-scored Google search, webpage extraction, and deep research.

  • Hosted MCP with 91 agent tools: X, domains, SEO, Maps, Trends, Search, YouTube, TikTok, and more.

  • AI research on companies and industries — one MCP tool per research domain.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/kalala252/asm-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server