MESH by Viscount Vulnerability Scanner

You can set up and run the Mesh Scanner MCP Server to assess MESH by Viscount systems for default credential vulnerabilities, perform scans, generate security reports, and export results. This guide walks you through practical usage, installation, and configuration so you can securely evaluate networks that you are authorized to test.

How to use

You interact with the Mesh Scanner MCP Server through an MCP client to perform scans, check for default credentials, and generate assessments. Start with a straightforward single IP scan to verify connectivity, then expand to IP ranges or targeted reports. Use the built-in tools to get system information, export results, or generate remediation guidance for vulnerable hosts.

How to install

Prerequisites: ensure you have Node.js installed on your system. You will also need npm to manage dependencies.

Install dependencies and build the server, then start it.

# Install dependencies
npm install

# Build the server
npm run build

# Run the server
npm start

Additional content

MCP configuration is provided to run and connect the Mesh Scanner as a local (stdio) server. Use the runtime command shown to integrate the server into your MCP environment.

{
  "mcpServers": {
    "mesh-scanner": {
      "command": "node",
      "args": ["path/to/mesh-scanner/build/index.js"]
    }
  }
}

Security and operational notes

This MCP server is intended for security research and educational purposes only. Ensure you have explicit authorization before scanning any systems. Follow best practices for responsible disclosure and limit scanning activity to systems you are permitted to test.

Key capabilities and data flow

The Mesh Scanner MCP Server offers single IP and IP range scanning, default credential testing, and system discovery. It can generate security reports, vulnerability summaries over time, and compliance reports. You can export results in JSON, CSV, or XML formats and access historical data for trends and analysis.

System information and tools access

The server can retrieve system information for vulnerable hosts and provide remediation guidance for identified issues. Real-time scan progress and rate limiting help you control the scope and safety of testing.

Notes on configuration and defaults

Default credentials used for testing are username: freedom and password: viscount. Use only in authorized scenarios and with explicit permission. You can tailor scan timeouts, concurrency, and rate limits to balance speed with safety.

Available tools

scan_ip

Scan a single IP address for MESH system presence and test default credentials.

scan_ip_range

Scan a range of IP addresses with configurable concurrency and timeout to discover MESH systems.

test_default_credentials

Test if a MESH system is vulnerable to default credentials.

get_system_info

Get detailed information about a vulnerable MESH system.

unlock_entrance

Unlock an entrance for educational purposes only.

export_scan_results

Export scan results to various formats and filters.

security_assessment

Generate comprehensive security assessments with risk analysis.

vulnerability_summary

Create summaries of vulnerabilities over specified timeframes.

compliance_report

Generate compliance reports for standards such as NIST, ISO27001, SOC2, and PCI-DSS.

remediation_guide

Provide remediation steps for vulnerable systems based on severity.