Metasploit MCP Server

Metasploit MCP Server is an MCP server that connects AI assistants like Claude to the Metasploit Framework penetration testing platform via its RPC daemon. Security professionals, ethical hackers, and penetration testers use this integration to query exploit databases, configure attack parameters, and manage security testing operations through conversational interfaces. The server exposes tools for discovering exploits and payloads, launching auxiliary scans, executing post-exploitation modules, generating payload files locally, and controlling interactive Meterpreter or shell sessions. It bridges large language model capabilities with the Metasploit RPC service (msfrpcd), allowing users to direct vulnerability assessments and handler management tasks using structured Model Context Protocol endpoints. Communication is supported across standard input/output for local desktop applications and Server-Sent Events over HTTP for distributed network clients. This setup allows security teams to integrate automated testing workflows and review live tool outputs alongside AI-assisted analysis.

Category: Developer Tools & Code Intelligence

Tags: cybersecurity, metasploit, penetration-testing, vulnerability-scanning

Visit Metasploit MCP Server

How to install and configure Metasploit MCP Server

1. Ensure Python 3.10 or higher is installed and the Metasploit Framework is running with its RPC daemon enabled via msfrpcd -P yourpassword -S -a 127.0.0.1 -p 55553. 2. Clone the repository and install dependencies using pip install -r requirements.txt. 3. To use STDIO mode with Claude Desktop, edit your claude_desktop_config.json to register the server: json { "mcpServers": { "metasploit": { "command": "uv", "args": [ "--directory", "/path/to/MetasploitMCP", "run", "MetasploitMCP.py", "--transport", "stdio" ], "env": { "MSF_PASSWORD": "yourpassword" } } } } 4. Alternatively, start the server in HTTP mode using python MetasploitMCP.py --transport http --host 0.0.0.0 --port 8085 and connect your client to http://your-server-ip:8085/sse.

What you can do with Metasploit MCP Server

• Searching Metasploit exploit and payload libraries filtered by platform, target architecture, or common vulnerability naming conventions. - Executing target exploits and auxiliary modules directly with custom target host settings and pre-run vulnerability verification checks. - Starting and stopping multi-handler listeners or background jobs to capture inbound shell and Meterpreter connections. - Generating standalone payload files locally across user-specified directories using the Metasploit RPC file generation interface. - Interacting with active shells or Meterpreter sessions by issuing commands like system information queries and running post-exploitation modules.

Key facts

• Open Source
• https://github.com/fishke22/MetasploitMCP
• Developer Tools & Code Intelligence, Security & Compliance
• cybersecurity, metasploit, penetration-testing, vulnerability-scanning

Part of MCP Servers

What is Metasploit MCP Server?

Metasploit MCP Server is an open source Model Context Protocol bridge that connects large language models to the Metasploit Framework via msfrpcd. It provides tools to search modules, configure exploits, manage background handlers, generate payloads, and interact with active penetration testing sessions.

What are the prerequisites to run Metasploit MCP Server?

You need Python 3.10 or higher and an active installation of Metasploit Framework. The Metasploit RPC daemon must be running using msfrpcd with an assigned password and listening port before the MCP server can connect.

Which transports are supported by Metasploit MCP Server?

The server supports both standard input/output (stdio) and HTTP with Server-Sent Events (SSE). STDIO is typically used for direct desktop integrations like Claude Desktop, while HTTP mode runs on a dedicated host and port for remote client connections.

Is Metasploit MCP Server open source?

Yes, Metasploit MCP Server is open source software distributed under the Apache 2.0 license. The source code and configuration details are publicly available on GitHub.