Security Operations Multi-Tool Platform (MCP)
About
All-in-one security testing toolbox that brings together popular open source tools through a single MCP interface. Connected to an AI agent, it enables tasks like pentesting, bug bounty hunting, threat hunting, and more.
Details
- Author
- securityfortech
- GitHub stars
- 203
- Downloads
- 465
- Categories
- Developer Tools
Jump to
- Unified single entry point for multiple security tools.
- Docker support for easy deployment and isolation.
- Consistent JSON output format across all integrated tools.
- Robust error handling and reporting.
- Extensible design for adding new tools and functionality.
- Includes 15+ pre-integrated tools covering web, network, recon, and cryptography.
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Security Operations Multi-Tool Platform (MCP)Command (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install via Docker (recommended) by cloning the repository, building the image with docker build -t secops-mcp ., then running the container with docker run -it --rm secops-mcp. Alternatively, manually clone, create a Python virtual environment, install dependencies from requirements.txt, and ensure all tools are in the system PATH. Start the application with python main.py to access the unified interface, which returns results in a standard JSON format.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"security operations multi-tool platform (mcp)": {
"secops-mcp": {
"command": "docker",
"args": [
"build",
"-t",
"secops-mcp",
"."
]
}
}
}
}
McpServers
{
"secops-mcp": {
"command": "docker",
"args": [
"build",
"-t",
"secops-mcp",
"."
]
}
}
Security Operations Multi-Tool Platform (MCP)
A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized way to run various security scanning and testing tools.
Features
- Unified Interface: Single entry point for multiple security tools
- Docker Support: Easy deployment using Docker
- JSON Output: Consistent JSON output format across all tools
- Error Handling: Robust error handling and reporting
- Extensible: Easy to add new tools and functionality
Included Tools
- Nuclei: Fast and customizable vulnerability scanner
- FFUF: Fast web fuzzer and content discovery tool
- Amass: In-depth attack surface mapping and external asset discovery
- Arjun: HTTP parameter discovery tool for finding hidden parameters
- Dirsearch: Web path scanner
- Gospider: Fast web spider for crawling and URL discovery
- Hashcat: Advanced password recovery
- HTTPX: Fast and multi-purpose HTTP toolkit
- IPInfo: IP address information gathering
- Nmap: Network exploration and security auditing
- SQLMap: Automatic SQL injection and database takeover tool
- Subfinder: Subdomain discovery tool
- TLSX: TLS/SSL scanning and analysis
- WFuzz: Web application fuzzer
- XSStrike: Advanced XSS detection and exploitation
Tool Categories
Web Application Security
- Nuclei: Vulnerability scanning with custom templates - FFUF: Fast web fuzzing and content discovery - WFuzz: Web application fuzzing - XSStrike: XSS detection and exploitation - SQLMap: SQL injection testing and exploitation - Arjun: HTTP parameter discovery and testing - Gospider: Web crawling and URL discovery - Dirsearch: Directory and file enumerationNetwork Security
- Nmap: Network scanning and service enumeration - HTTPX: HTTP probing and analysis - TLSX: TLS/SSL configuration analysisReconnaissance
- Amass: Attack surface mapping and asset discovery - Subfinder: Subdomain enumeration - IPInfo: IP address intelligence gatheringCryptography
- Hashcat: Password cracking and hash analysisRecent Additions
Gospider Integration
- Web Crawling: Automated website crawling and URL discovery - Multiple Output Formats: JSON and text output support - Filtering Capabilities: Extension-based filtering and content filtering - Configurable Depth: Customizable crawling depth and concurrency - Subdomain Support: Option to include subdomains in crawling - Form Detection: Automatic detection of HTML forms - Secret Discovery: Identification of potential sensitive informationArjun Integration
- Parameter Discovery: Find hidden HTTP parameters in web applications - Multiple HTTP Methods: Support for GET, POST, PUT, and other methods - Bulk Scanning: Scan multiple URLs simultaneously - Custom Wordlists: Use custom parameter wordlists - Stable Mode: Reduced false positives with stable scanning mode - Custom Headers: Support for custom HTTP headers and authentication - Threading Support: Configurable threading for faster scansInstallation
Using Docker (Recommended)
1. Clone the repository:
git clone https://github.com/securityfortech/secops-mcp.git
cd secops-mcp
2. Build the Docker image:
docker build -t secops-mcp .
3. Run the container:
docker run -it --rm secops-mcp
Manual Installation
1. Clone the repository:
git clone https://github.com/securityfortech/secops-mcp.git
cd secops-mcp
2. Create and activate a virtual environment:
python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
3. Install dependencies:
pip install -r requirements.txt
4. Install required tools:
- Follow the installation instructions for each tool in the tools/ directory
- Ensure all tools are in your system PATH
Usage
1. Start the application:
python main.py
2. The application will provide a unified interface for running various security tools.
3. Each tool returns results in a consistent JSON format:
{
"success": boolean,
"error": string (if error),
"results": object (if success)
}
Usage Examples
Gospider Web Crawling
```pythonSign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.





