asm-mcp-server
asm-mcp-server
这是一个用于从MCP客户端使用asm-agent的本地服务器。连接的LLM可以将公开信息的收集、已保存结果的引用、依据的确认作为MCP工具执行。
该服务器本身不调用LLM API。对话和摘要使用MCP客户端侧的模型。
必要条件
Python 3.12或更高版本
单独设置的
asm-agent支持MCP的LLM客户端
Related MCP server: groundwork
设置
将asm-agent和asm-mcp-server放在不同的文件夹中,并分别准备各自的依赖关系。
cd /absolute/path/to/asm-agent
uv sync
cd /absolute/path/to/asm-mcp-server
uv sync使用Shodan时,请在asm-agent侧保存API密钥。
cd /absolute/path/to/asm-agent
uv run asm-agent credentials set-shodan注册到MCP客户端
将以下内容添加到MCP客户端的设置中。请全部使用绝对路径指定。
{
"mcpServers": {
"passive-attack-surface": {
"command": "/absolute/path/to/uv",
"args": [
"--directory",
"/absolute/path/to/asm-mcp-server",
"run",
"asm-mcp-server"
],
"env": {
"ASM_AGENT_EXECUTABLE": "/absolute/path/to/asm-agent/.venv/bin/asm-agent",
"ASM_MCP_REPORT_DIR": "/absolute/path/to/asm-mcp-server/reports"
}
}
}
}注册后,重新启动或重新连接MCP客户端。
在Windows中,请在command中指定uv.exe的绝对路径,并以以下格式指定ASM_AGENT_EXECUTABLE。
C:\absolute\path\to\asm-agent\.venv\Scripts\asm-agent.exe对话示例
example.comをShodanありで調査して、見つかったホスト名、IPアドレス、公開ポート、CVE候補を根拠付きでまとめて。可用工具
工具 | 内容 |
| 收集并保存域名的公开信息 |
| 返回已保存报告的列表 |
| 返回收集数量、警告、错误 |
| 返回主机名、IP地址、公开服务 |
| 返回信息来源和观测日期时间 |
| 返回Shodan的CVE候选、产品、版本 |
返回列表的工具可以通过offset和limit进行分页获取。
设置
环境变量 | 默认值 | 内容 |
| PATH上的 | 要执行的 |
|
| 报告保存位置 |
|
| 等待一次调查的最大秒数 |
Shodan的CVE是基于过去观测的候选,并不证明当前仍然存在漏洞。
开发
uv run ruff check .
uv run mypy src
uv run pytest许可证
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseAqualityCmaintenanceProvides AI agents with 37 OSINT tools and 12 data sources to perform unified reconnaissance, domain analysis, and attack surface mapping. It enables agents to query, correlate, and reason across platforms like Shodan, VirusTotal, and Censys in parallel.3768144MIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to perform grounded web research with injection resistance, claim verification, and cost-aware routing through MCP tools like web_search, fetch_url, extract_claims, and check_grounding.MIT
- AlicenseBqualityAmaintenanceMCP search and evidence tool for AI agents. Rewrites queries, zooms into source domains, and returns sourced answers with metrics.11MIT
- AlicenseNot gradedqualityBmaintenanceEnables LLMs to perform OSINT link-analysis by exposing transforms (DNS, WHOIS, Shodan, etc.) as MCP tools for autonomous investigation and graph enrichment.MIT
Related MCP Connectors
Web research for agents: quality-scored Google search, webpage extraction, and deep research.
Hosted MCP with 91 agent tools: X, domains, SEO, Maps, Trends, Search, YouTube, TikTok, and more.
AI research on companies and industries — one MCP tool per research domain.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/kalala252/asm-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server