Fire in da houseTop Tip:Paying $100+ per month for Perplexity, MidJourney, Runway, ChatGPT and other tools is crazy - get all your AI tools in one site starting at $15 per month with Galaxy AI Fire in da houseCheck it out free

CyberSecurity-MCPs

MCP.Pizza Chef: secmate-ai

CyberSecurity-MCPs is a Model Context Protocol server collection specialized in cybersecurity. It includes independent MCP server implementations like sqlmap-mcp for SQL injection testing, quake-server for cyberspace asset search, and doc-processor for Markdown to Word conversion. Developed mainly in TypeScript, it supports security testing, resource management, and document processing with custom formatting, enabling secure, modular, and extensible cybersecurity workflows.

Use This MCP server To

Perform automated SQL injection vulnerability scans on target URLs Search and manage cyberspace assets using integrated search engine Create and manage security testing notes and reports Convert Markdown cybersecurity documentation into formatted Word files Integrate cybersecurity tools into MCP-enabled AI workflows Debug and extend MCP servers for custom security use cases Organize and annotate network security assets and findings

README

Model Context Protocol Server For Cyber Security

项目简介

这是一个专注于网络安全领域的 Model Context Protocol Server (MCPs) 集合项目,包含两个主要目标:

  1. 收集和整理现有的网络安全相关 MCP 服务器实现
  2. 开发新的 MCP Server 实现

每个 MCP Server 都独立封装在各自的目录中,便于管理和使用。

实现列表

1. sqlmap-mcp

SQL注入测试工具的MCP服务器实现。基于TypeScript开发,提供了以下功能:

  • 支持对目标URL进行SQL注入扫描
  • 提供创建和管理测试笔记的功能
  • 集成了调试工具支持

2. quake-server

基于360 Quake的网络空间搜索引擎MCP服务器实现。主要特点:

  • 提供网络空间资产搜索能力
  • 支持资源管理和笔记功能
  • 基于TypeScript开发的现代化架构

3. doc-processor

Markdown到Word文档的转换工具MCP服务器实现。主要特点:

  • 支持将Markdown格式内容转换为Word文档
  • 支持嵌套列表、表格、代码块等Markdown元素
  • 提供自定义样式和格式控制
  • 能够处理中文文档和特殊格式要求

项目结构

.
├── implementations/           # 自主开发的 MCP Server 实现
│   ├── sqlmap-mcp/          # SQL注入测试工具MCP实现
│   │   ├── src/             # 源代码目录
│   │   ├── build/          # 编译输出目录
│   │   └── README.md       # 实现文档
│   ├── quake-server/        # Quake搜索引擎MCP实现
│   │   ├── src/             # 源代码目录
│   │   ├── build/          # 编译输出目录
│   │   └── README.md       # 实现文档
│   └── doc-processor/       # 文档处理工具MCP实现
│       ├── src/             # 源代码目录
│       ├── build/          # 编译输出目录
│       └── README.md       # 实现文档
└── README.md               # 项目主文档

开发

每个实现都遵循类似的开发流程:

  1. 安装依赖:
npm install
  1. 构建服务器:
npm run build
  1. 开发模式(自动重新构建):
npm run watch

安装使用

要在Claude Desktop中使用这些MCP服务器,需要在配置文件中添加相应的服务器配置:

MacOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%/Claude/claude_desktop_config.json

示例配置:

{
  "mcpServers": {
    "sqlmap-server": {
      "command": "/path/to/sqlmap-mcp/build/index.js"
    },
    "quake-server": {
      "command": "node",
      "args": [
        "/path/to/quake-server/build/index.js"
      ],
      "env": {
        "QUAKE_API_KEY": "xxxxxx-xxxx-xxxx-xxxx-xxxxxxx"
      },
      "disabled": false,
      "alwaysAllow": []
    },
    "doc-processor": {
      "command": "node",
      "args": [
        "/path/to/doc-processor/build/index.js"
      ],
      "disabled": false,
      "alwaysAllow": []
    }
  }
}

调试

所有MCP服务器都支持使用MCP Inspector进行调试:

npm run inspector

Inspector将提供一个Web界面用于服务器调试。

CyberSecurity-MCPs FAQ

How do I deploy the CyberSecurity-MCPs server?
Clone the repository, install dependencies, and run the TypeScript build scripts for each MCP server implementation.
Can I extend CyberSecurity-MCPs with my own MCP server?
Yes, each MCP server is modular and independently encapsulated for easy extension and integration.
What programming language is used for CyberSecurity-MCPs?
The implementations are primarily developed in TypeScript for modern, scalable server architecture.
Does CyberSecurity-MCPs support handling non-English documents?
Yes, the doc-processor MCP server supports Chinese documents and special formatting requirements.
How does CyberSecurity-MCPs integrate with AI models?
It exposes structured cybersecurity context and tools via MCP, enabling real-time model interaction and automation.
Are there debugging tools included?
Yes, sqlmap-mcp includes integrated debugging support for testing and development.
What types of cybersecurity tasks can I automate with CyberSecurity-MCPs?
Tasks like SQL injection scanning, asset searching, note management, and document conversion can be automated.
Is the project open for contributions?
Yes, the project encourages contributions to add new MCP server implementations and improve existing ones.