Security Operations Multi-Tool Platform (MCP)
About
All-in-one security testing toolbox that brings together popular open source tools through a single MCP interface. Connected to an AI agent, it enables tasks like pentesting, bug bounty hunting, threat hunting, and more.
Details
- License
- MIT
Explore
- Unified Interface: Single entry point for multiple security tools
- Docker Support: Easy deployment using Docker
- JSON Output: Consistent JSON output format across all tools
- Error Handling: Robust error handling and reporting
- Extensible: Easy to add new tools and functionality
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Security Operations Multi-Tool Platform (MCP)Command (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
1. Start the application:
python main.py
2. The application will provide a unified interface for running various security tools.
3. Each tool returns results in a consistent JSON format:
{
"success": boolean,
"error": string (if error),
"results": object (if success)
}
1. Clone the repository:
git clone https://github.com/securityfortech/secops-mcp.git
cd secops-mcp
2. Create and activate a virtual environment:
python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
3. Install dependencies:
pip install -r requirements.txt
4. Install required tools:
- Follow the installation instructions for each tool in the tools/ directory
- Ensure all tools are in your system PATH
Each tool can be configured through its respective wrapper in the tools/ directory. Configuration options include:
- Output formats
- Timeouts
- Verbosity levels
- Custom wordlists
- Tool-specific parameters
A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized way to run various security scanning and testing tools.
- Nuclei: Fast and customizable vulnerability scanner
- FFUF: Fast web fuzzer and content discovery tool
- Amass: In-depth attack surface mapping and external asset discovery
- Arjun: HTTP parameter discovery tool for finding hidden parameters
- Dirsearch: Web path scanner
- Gospider: Fast web spider for crawling and URL discovery
- Hashcat: Advanced password recovery
- HTTPX: Fast and multi-purpose HTTP toolkit
- IPInfo: IP address information gathering
- Nmap: Network exploration and security auditing
- SQLMap: Automatic SQL injection and database takeover tool
- Subfinder: Subdomain discovery tool
- TLSX: TLS/SSL scanning and analysis
- WFuzz: Web application fuzzer
- XSStrike: Advanced XSS detection and exploitation
Each tool can be configured through its respective wrapper in the tools/ directory. Configuration options include:
- Output formats
- Timeouts
- Verbosity levels
- Custom wordlists
- Tool-specific parameters
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"security operations multi-tool platform (mcp)": {
"secops-mcp": {
"command": "docker",
"args": [
"build",
"-t",
"secops-mcp",
"."
]
}
}
}
}McpServers
{
"secops-mcp": {
"command": "docker",
"args": [
"build",
"-t",
"secops-mcp",
"."
]
}
}A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized way to run various security scanning and testing tools.
Features
- Unified Interface: Single entry point for multiple security tools
- Docker Support: Easy deployment using Docker
- JSON Output: Consistent JSON output format across all tools
- Error Handling: Robust error handling and reporting
- Extensible: Easy to add new tools and functionality
Included Tools
- Nuclei: Fast and customizable vulnerability scanner
- FFUF: Fast web fuzzer and content discovery tool
- Amass: In-depth attack surface mapping and external asset discovery
- Arjun: HTTP parameter discovery tool for finding hidden parameters
- Dirsearch: Web path scanner
- Gospider: Fast web spider for crawling and URL discovery
- Hashcat: Advanced password recovery
- HTTPX: Fast and multi-purpose HTTP toolkit
- IPInfo: IP address information gathering
- Nmap: Network exploration and security auditing
- SQLMap: Automatic SQL injection and database takeover tool
- Subfinder: Subdomain discovery tool
- TLSX: TLS/SSL scanning and analysis
- WFuzz: Web application fuzzer
- XSStrike: Advanced XSS detection and exploitation
Tool Categories
Web Application Security
- Nuclei: Vulnerability scanning with custom templates - FFUF: Fast web fuzzing and content discovery - WFuzz: Web application fuzzing - XSStrike: XSS detection and exploitation - SQLMap: SQL injection testing and exploitation - Arjun: HTTP parameter discovery and testing - Gospider: Web crawling and URL discovery - Dirsearch: Directory and file enumerationNetwork Security
- Nmap: Network scanning and service enumeration - HTTPX: HTTP probing and analysis - TLSX: TLS/SSL configuration analysisReconnaissance
- Amass: Attack surface mapping and asset discovery - Subfinder: Subdomain enumeration - IPInfo: IP address intelligence gatheringCryptography
- Hashcat: Password cracking and hash analysisRecent Additions
Gospider Integration
- Web Crawling: Automated website crawling and URL discovery - Multiple Output Formats: JSON and text output support - Filtering Capabilities: Extension-based filtering and content filtering - Configurable Depth: Customizable crawling depth and concurrency - Subdomain Support: Option to include subdomains in crawling - Form Detection: Automatic detection of HTML forms - Secret Discovery: Identification of potential sensitive informationArjun Integration
- Parameter Discovery: Find hidden HTTP parameters in web applications - Multiple HTTP Methods: Support for GET, POST, PUT, and other methods - Bulk Scanning: Scan multiple URLs simultaneously - Custom Wordlists: Use custom parameter wordlists - Stable Mode: Reduced false positives with stable scanning mode - Custom Headers: Support for custom HTTP headers and authentication - Threading Support: Configurable threading for faster scansInstallation
Using Docker (Recommended)
1. Clone the repository:
git clone https://github.com/securityfortech/secops-mcp.git
cd secops-mcp
2. Build the Docker image:
docker build -t secops-mcp .
3. Run the container:
docker run -it --rm secops-mcp
Manual Installation
1. Clone the repository:
git clone https://github.com/securityfortech/secops-mcp.git
cd secops-mcp
2. Create and activate a virtual environment:
python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
3. Install dependencies:
pip install -r requirements.txt
4. Install required tools:
- Follow the installation instructions for each tool in the tools/ directory
- Ensure all tools are in your system PATH
Usage
1. Start the application:
python main.py
2. The application will provide a unified interface for running various security tools.
3. Each tool returns results in a consistent JSON format:
{
"success": boolean,
"error": string (if error),
"results": object (if success)
}
Usage Examples
Gospider Web Crawling
```pythonSign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
