sliver-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SLIVER_CONFIG | Yes | Path to the Sliver operator config (.cfg) file |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| connectA | Connect to the Sliver team server using an operator config. Call this first. |
| statusA | Report connection health, server version, and live object counts. |
| get_versionA | Return the Sliver server version details. |
| poll_eventsB | Drain buffered server events (session/beacon connect, jobs, etc.). |
| disconnectA | Disconnect from the team server and stop the event pump. |
| start_https_listenerC | Start an HTTPS C2 listener. Returns its job id. |
| start_http_listenerC | Start a plain HTTP C2 listener (test/redirector use). Returns job id. |
| start_mtls_listenerC | Start a mutual-TLS C2 listener. Returns its job id. |
| start_dns_listenerB | Start a DNS C2 listener for the given parent domain(s). Returns job id. |
| start_wg_listenerC | Start a WireGuard C2 listener. |
| list_jobsA | List active jobs (listeners). Each has a job_id usable with kill_job. |
| kill_jobC | Stop a job/listener by its job id. |
| generate_implantB | Build a session-mode implant (interactive callback). Saved to disk.
|
| generate_beaconC | Build a beacon-mode implant (async check-in every |
| list_implant_buildsA | List previously generated implant builds by name. |
| list_implant_profilesA | List saved implant profiles. |
| regenerate_implantB | Re-download a previously built implant by name, saving it to disk. |
| list_sessionsA | List active interactive sessions. |
| list_beaconsA | List registered beacons (async check-in implants). |
| session_infoC | Get details for one session by id. |
| beacon_infoC | Get details for one beacon by id. |
| kill_sessionC | Terminate a session (the implant exits). yellow-tier. |
| kill_beaconC | Remove a beacon from the server. yellow-tier. |
| executeB | Run an executable on a session or beacon. yellow-tier (host telemetry).
|
| execute_commandC | Convenience: shell-split |
| lsA | List a remote directory on a session/beacon. |
| pwdB | Get the remote working directory. |
| cdC | Change the remote working directory. |
| mkdirC | Create a remote directory. |
| downloadB | Download a remote file. Saves to Returns the local path and size; for text files also a UTF-8 preview. |
| uploadB | Upload a file to a session/beacon from a local file or base64 data. |
| rmB | Delete a remote file/dir. RED-tier — requires arm_dangerous() first. |
| list_pivotsC | List pivot listeners running on a session. |
| export_handoffA | Export structured C2 state (sessions, beacons, listeners, builds). Mirrors p0rtix's export_handoff so the agent can feed C2 state back into internal-dispatch. |
| ingest_handoffA | Stand up a listener + beacon from a p0rtix/msf-style handoff. Accepts loose keys (redirector/callback_domain/domain/lhost/host/hosts, protocol, port, os, arch) and creates a matching listener, then generates a matching beacon. Honors the current noise ceiling. |
| set_noiseB | Set the noise ceiling: passive|green|yellow|red. RED needs arming. |
| arm_dangerousA | Unlock RED-tier destructive tools (rm) and raise the ceiling to red. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 37 tools
Most tools have distinct purposes, but execute and execute_command overlap significantly; also generate_beacon and generate_implant could be confused despite their descriptions. Overall, an agent can distinguish most tools.
Naming uses a consistent snake_case with verb_noun pattern (e.g., list_beacons, kill_job). Common unix-like commands (cd, ls, rm) fit the pattern and are expected. No mixing of styles.
37 tools is high but justified for a C2 framework covering listeners, implants, sessions, beacons, file ops, and noise management. Some redundancy (execute vs execute_command) suggests potential for consolidation.
Covers essential C2 operations: connect, manage listeners, generate implants, control sessions/beacons, file operations, event polling, and handoff import/export. Minor gaps like editing implant profiles, but core workflows are complete.