HackerMCP Server

Provides access to Nmap and Metasploit through an MCP server for automated security testing workflows.

python

4

GitHub Stars

python

Language

6 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "r3versein-hackermcp": {
      "command": "uv",
      "args": [
        "--directory",
        "~/dir/to/hackermcp",
        "run",
        "hacker.py"
      ],
      "env": {
        "YOUR_API_KEY": "<YOUR_API_KEY>"
      }
    }
  }
}

HackerMCP provides a dedicated MCP server interface to run security testing tools like Nmap and the Metasploit Framework through a unified, programmable channel. It enables automated security tooling workflows inside your MCP ecosystem, making it easier to orchestrate network scanning and exploitation workflows from your AI-powered assistants.

How to use

You will interact with this MCP server through your MCP client to run security tools. The server exposes a local runtime that executes the tool commands you specify via the unified interface. Typical workflows include launching a network discovery scan with Nmap or performing penetration-test related tasks using the Metasploit Framework, all routed through the HackerMCP server.

How to install

Prerequisites you need before installation:

Python 3.8 or higher
Nmap installed on your system
Metasploit Framework installed on your system

Set up a Python virtual environment and install the MCP runtime using the following steps.

git clone https://github.com/R3verseIN/HackerMCP
cd HackerMCP

uv venv
source .venv/bin/activate

uv pip install -r requirements.txt

Installing UV

If you don’t have the uv package manager, install it using one of the options below.

pip3 install uv

Or use curl to download the installation script:

curl -LsSf https://astral.sh/uv/install.sh | sh


If your system doesn’t have curl, you can use wget to fetch the installer.

wget -qO- https://astral.sh/uv/install.sh | sh


## Available tools

### Nmap

Network discovery and security auditing to identify live hosts, open ports, and services.

### Metasploit Framework

Penetration testing framework that provides modules for exploit development and security testing workflows.