Production-ready, Dockerized MCP (Model Context Protocol) servers for offensive security tools. Enable AI assistants like Claude to perform security assessments, vulnerability scanning, and binary analysis.
How to install mcp-security-hub?
fuzzinglabs/mcp-security-hub
$git clone https://github.com/fuzzinglabs/mcp-security-hubInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Install mcp-security-hub by running `git clone https://github.com/fuzzinglabs/mcp-security-hub`, then use it for the current task and follow its documentation at https://github.com/fuzzinglabs/mcp-security-hub.
README.md
| 1 | # Offensive Security MCP Servers |
| 2 | |
| 3 | [](https://github.com/FuzzingLabs/mcp-security-hub/actions/workflows/build.yml) |
| 4 | [](https://github.com/FuzzingLabs/mcp-security-hub/actions/workflows/security-scan.yml) |
| 5 | [](https://opensource.org/licenses/MIT) |
| 6 | [](https://modelcontextprotocol.io/) |
| 7 | |
| 8 | Production-ready, Dockerized MCP (Model Context Protocol) servers for offensive security tools. Enable AI assistants like Claude to perform security assessments, vulnerability scanning, and binary analysis. |
| 9 | |
| 10 | <p align="center"> |
| 11 | <img src="https://img.shields.io/badge/MCPs-38-brightgreen" alt="38 MCPs"/> |
| 12 | <img src="https://img.shields.io/badge/Tools-300+-orange" alt="300+ Tools"/> |
| 13 | <img src="https://img.shields.io/badge/Docker-Ready-blue" alt="Docker Ready"/> |
| 14 | </p> |
| 15 | |
| 16 | ## Features |
| 17 | |
| 18 | - **38 MCP Servers** covering reconnaissance, web security, binary analysis, blockchain security, cloud security, code security, secrets detection, threat intelligence, OSINT, Active Directory, fuzzing, and more |
| 19 | - **300+ Security Tools** accessible via natural language through Claude or other MCP clients |
| 20 | - **Production Hardened** - Non-root containers, minimal images, Trivy-scanned |
| 21 | - **Docker Compose** orchestration for multi-tool workflows |
| 22 | - **CI/CD Ready** with GitHub Actions for automated builds and security scanning |
| 23 | |
| 24 | ## Quick Start |
| 25 | |
| 26 | ```bash |
| 27 | # Clone the repository |
| 28 | git clone https://github.com/FuzzingLabs/mcp-security-hub |
| 29 | cd mcp-security-hub |
| 30 | |
| 31 | # Build all MCP servers |
| 32 | docker-compose build |
| 33 | |
| 34 | # Start specific servers |
| 35 | docker-compose up nmap-mcp nuclei-mcp -d |
| 36 | |
| 37 | # Verify health |
| 38 | docker-compose ps |
| 39 | ``` |
| 40 | |
| 41 | ### Configure Claude Desktop / Claude Code |
| 42 | |
| 43 | **Important:** You must build the images first with `docker-compose build` before using them. |
| 44 | |
| 45 | Copy the example config to your Claude Desktop configuration: |
| 46 | |
| 47 | **macOS**: `~/Library/Application Support/Claude/claude_desktop_config.json` |
| 48 | |
| 49 | **Windows**: `%APPDATA%\Claude\claude_desktop_config.json` |
| 50 | |
| 51 | ```json |
| 52 | { |
| 53 | "mcpServers": { |
| 54 | "nmap": { |
| 55 | "command": "docker", |
| 56 | "args": ["run", "-i", "--rm", "--cap-add=NET_RAW", "nmap-mcp:latest"] |
| 57 | }, |
| 58 | "nuclei": { |
| 59 | "command": "docker", |
| 60 | "args": ["run", "-i", "--rm", "nuclei-mcp:latest"] |
| 61 | }, |
| 62 | "gitleaks": { |
| 63 | "command": "docker", |
| 64 | "args": ["run", "-i", "--rm", "-v", "/path/to/repos:/app/target:ro", "gitleaks-mcp:latest"] |
| 65 | }, |
| 66 | "radare2": { |
| 67 | "command": "docker", |
| 68 | "args": ["run", "-i", "--rm", "-v", "/path/to/binaries:/samples:ro", "radare2-mcp:latest"] |
| 69 | } |
| 70 | } |
| 71 | } |
| 72 | ``` |
| 73 | |
| 74 | For project-level config, copy `.mcp.json` to your project root. See [examples/](./examples/) for full configuration templates with all MCPs and volume mount patterns. |
| 75 | |
| 76 | ## Available MCP Servers |
| 77 | |
| 78 | ### Reconnaissance (8 servers) |
| 79 | |
| 80 | | Server | Tools | Description | |
| 81 | |--------|-------|-------------| |
| 82 | | [nmap-mcp](./reconnaissance/nmap-mcp) | 8 | Port scanning, service detection, OS fingerprinting, NSE scripts | |
| 83 | | [shodan-mcp](./reconnaissance/shodan-mcp) | - | Wrapper for [official Shodan MCP](https://github.com/BurtTheCoder/mcp-shodan) | |
| 84 | | [pd-tools-mcp](./reconnaissance/pd-tools-mcp) | - | Wrapper for [ProjectDiscovery tools](https://github.com/intelligent-ears/pd-tools-mcp) (subfinder, httpx, katana) | |
| 85 | | [whatweb-mcp](./reconnaissance/whatweb-mcp) | 5 | Web technology fingerprinting and CMS detection | |
| 86 | | [masscan-mcp](./reconnaissance/masscan-mcp) | 6 | High-speed port scanning for large networks | |
| 87 | | [zoomeye-mcp](./reconnaissance/zoomeye-mcp) | - | Wrapper for [ZoomEye MCP](https://github.com/zoomeye-ai/mcp_zoomeye) - Cyberspace search engine | |
| 88 | | [networksdb-mcp](./reconnaissance/networksdb-mcp) | 4 | IP/ASN/DNS lookups via [NetworksDB](https://github.com/MorDavi |
Related
6 picksType
- mcp-scannerA tool to scan MCP servers and tools for security findingsJul 2026
- hol-guardOpen-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs.Jul 2026
- agent-scanAgent supply chain security scanner.Jul 2026
- falcon-mcpConnects AI agents with CrowdStrike Falcon for security analysis and automation.Jul 2026
- pythonPlug-and-play auth for Python MCP servers.Aug 2025
- auth0-mcp-serverAuth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural languageJul 2026
