ldapdomaindump MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| KALI_HOST | No | SSH hostname or alias for Kali | kali |
| LDAP_OUTPUT_DIR | No | Directory on Kali for output files | /tmp/ldapdomaindump |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| ldapdomaindump_dumpB | Perform a full LDAP domain dump - enumerates users, groups, computers, trusts, and policies. Outputs HTML, JSON, and greppable files. |
| ldapdomaindump_usersB | Enumerate domain users only. Returns user accounts with attributes like name, description, last logon, password expiry, etc. |
| ldapdomaindump_groupsB | Enumerate domain groups and their memberships. Returns group names, descriptions, and member lists. |
| ldapdomaindump_computersB | Enumerate domain computers. Returns computer accounts with OS info, hostnames, and descriptions. |
| ldapdomaindump_trustsB | Enumerate domain trusts. Returns trust relationships between domains including trust direction and type. |
| ldapdomaindump_policiesA | Get domain password policies and fine-grained password policies (PSOs). Returns lockout thresholds, password length requirements, etc. |
| ldapdomaindump_read_outputA | Read previously generated ldapdomaindump output files from Kali. Use after running a dump to retrieve specific results. |
| ldapdomaindump_ldd2prettyB | Convert ldapdomaindump JSON output to enum4linux-like readable format using the ldd2pretty utility. |
| ldapdomaindump_checkA | Check if ldapdomaindump is installed and accessible on the Kali host via SSH. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 9 tools
Most tools have clearly distinct purposes (check, dump, specific enumerations), but the full dump tool overlaps with the targeted enumeration tools (users, groups, computers, etc.). Descriptions help differentiate, but an agent might still be uncertain whether to use 'dump' vs. a specific tool.
All tools share the 'ldapdomaindump_' prefix, and names are generally verb_noun or noun. However, mixed verb forms (e.g., 'check', 'dump', 'read_output') and the utility 'ldd2pretty' break strict consistency. Overall pattern is clear.
9 tools is well-suited for an LDAP domain dump MCP server. Each tool addresses a distinct need without unnecessary bloat, covering installation check, full dump, specific enumerations, output conversion, and file retrieval.
The tool set covers the full lifecycle of LDAP domain reconnaissance: checking the tool, performing full or targeted dumps, converting output, and reading results. No obvious gaps exist given the read-only nature of the domain enumeration use case.