Rapid7 Docs MCP Server

Search Rapid7 documentation, product info, blog posts, and resources from any MCP-compatible AI client. Self-hostable, authenticated, runs in Docker.

Built on FastMCP. Serves both Streamable HTTP and SSE — works with Claude Desktop, OpenChamber, Bifrost, and any MCP-compatible client.

Disclaimer: Vibe coded with Claude Code and Opencode. Created in personal time and is not officially supported or associated with Rapid7 and only uses public resources. Use at your own risk. Do not approach Rapid7 for support or issues regarding this project. Please open an issue instead.

Quick Start

Option 1: GHCR pre-built images

curl -O https://raw.githubusercontent.com/drunkrhin0/rapid7-docs-mcp/main/docker-compose.yml
echo 'IMAGE_REGISTRY=ghcr.io/drunkrhin0/' > .env
docker compose pull
docker compose up -d

Option 2: Build from source

git clone https://github.com/drunkrhin0/rapid7-docs-mcp
cd rapid7-docs-mcp
docker compose up -d

On first boot, the crawler indexes ~2,000 docs pages (10–30 min). After that, starts instantly. Data persists in Docker volumes. Cron keeps it fresh.

Connect any MCP client to: http://localhost:8002/mcp (Streamable HTTP)

SSE for OpenChamber/Bifrost: docker compose --profile sse up, then http://localhost:8004/mcp

How it works

Two services by default. SSE is opt-in (--profile sse):

Tools

Authentication (optional)

Set MCP_API_KEYS in .env to require API keys. Omit for open access.

MCP_API_KEYS=key1,key2,key3

OAuth providers (Auth0, Google, GitHub, etc.) supported via FastMCP auth docs.

Configuration

Full env var reference: docker-compose.yml.

Manual crawls

docker compose run --rm crawler npm run crawl                    # all docs
docker compose run --rm crawler npm run crawl -- --section insightidr  # one section
docker compose run --rm crawler npm run crawl:extensions         # extensions
docker compose run --rm crawler npm run crawl:site               # products, blog, resources
docker compose run --rm crawler npm run crawl:external -- --insightvm-api  # OpenAPI specs

Run npm run crawl -- --list inside the container to see available sections.

Docs: crawl -- --section insightidr | --url <url> | --list | --verbose

Site: crawl:site -- --products | --blog | --resources | --product command

External: crawl:external -- --metasploit | --velociraptor | --insightvm-api | --insightvm-cloud-api | --insightappsec-api | --insightidr-api | --insight-account-api | --credential-api | --insightconnect-api | --insightidr-detection-api

GitHub sources (Metasploit wiki, Velociraptor docs) fetched as markdown. OpenAPI specs split into one file per tag. Set GITHUB_TOKEN for higher API rate limits.

Cannot crawl: Threat Command / DRP API (requires authentication).