Reports

You run a dedicated MCP server to manage penetration testing reports and vulnerabilities. It offers CRUD operations for reports and vulnerabilities, supports CVSS 3.1 scoring, formats content to HTML, and secures API access with JWT authentication, letting you integrate it into your testing workflows and automation.

How to use

You will connect an MCP client to the Reports MCP Server to create, read, update, and delete reports and vulnerabilities. Use the client to manage penetration testing findings, score them with CVSS 3.1, and rely on HTML-formatted content for readable reports. Enable JWT authentication to protect the API, and provide the token with every request.

How to install

Prerequisites and installation steps are outlined below. Follow these commands exactly to set up the server locally.

# 1. Install Node.js (version 18 or higher)
# On macOS (recommended via Homebrew)
brew install node

# On Windows, download and install from nodejs.org

# On Linux (example for Ubuntu/Debian)
curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
sudo apt-get install -y nodejs

Verify the installation to ensure Node.js and npm are available.

node --version    # Should show v18.0.0 or higher
npm --version     # Should show an npm version

Next, clone the server repository, install dependencies, and start the server.

git clone https://github.com/izzy0101010101/mcp-reports-server.git
cd mcp-reports-server
npm install
npm start

When the server starts you should see a message indicating the server is running and that a JWT token is required for requests.

Configuration and usage notes

To authenticate, obtain a JWT token from your reports API system and configure the client to pass that token with every request.

Configure Claude Desktop to load the server as an MCP source. Point Claude to the local server script and provide your JWT token via an environment variable.

{
  "mcpServers": {
    "reports-server": {
      "command": "node",
      "args": ["/full/path/to/your/mcp-reports-server/server.js"],
      "env": {
        "REPORTS_JWT_TOKEN": "your_actual_jwt_token_here"
      }
    }
  }
}

Available tools

reportCRUD

Create, read, update, and delete penetration testing reports. Manage report metadata, status, and associated vulnerabilities.

vulnerabilityCRUD

Add, modify, and delete vulnerabilities within reports, including CVSS scores and remediation status.

cvssSupport

Fully support CVSS 3.1 scoring and vector strings for accurate vulnerability risk assessment.

htmlFormatting

Automatically format text content to HTML for consistent report presentation.

jwtAuthentication

Secure API access with configurable JWT authentication and per-request token validation.