nuclei-mcp - An implementation of a Model Context Protocol (MCP

项目说明

Nuclei MCP Integration

A Model Context Protocol (MCP) ser that integrates Nuclei, a fast and customizable scanner, with the MCP ecosystem. This ser a standardized interface for performing security scans and managing assessments programmatically.

Features

Tools & Endpoints

Core Tools

Getting Started

Prerequisites

Installation

#### Option 1: Download Pre-built Binary (Recommended)

1. Download the latest release for your platform from the Releases page
2. Extract the archive
3. Run the binary:

#### Option 2: Install with Go

#### Option 3: Build from Source

1. Clone the repository:

2. Install dependencies:

3. Build and run:

Running the Server

Start the MCP server:

Using the MCP Inspector

For de and testing, use the MCP Inspector:

The inspector UI will be a at

Configuration

Configuration can be managed through a YAML configuration file or en . The ser for configuration in the following locations (in order of precedence):

1. File specified by --config flag
2. config.yaml in the current directory
3. $HOME/.nuclei-mcp/config.yaml
4. /etc/nuclei-mcp/config.yaml

Configuration File Example

Create a config.yaml file with the following structure:

En

All configuration options can also be set using en with the NUCLEI_MCP_ prefix (e.g., NUCLEI_MCP_SER=3000). Nested configuration can be set using double underscores (e.g., NUCLEI_MCP_LOGGING_LE).

MCP Client Configuration

To connect an MCP client to the Nuclei MCP server, use the following connection parameters:

For HTTP connections, the server will be a at by default (configurable via the server.port and server.host configuration options).

Example MCP client configuration (JSON):

Releases

This project uses GoReleaser for automated releases. Each release includes:

Creating a Release

To create a new release:

1. Tag the release:

2. GitHub Actions will automatically:
- Build binaries for all supported platforms
- Create release archives
- Generate checksums
- Create a GitHub release with changelog
- Upload all artifacts

Manual Release (De)

For testing releases locally:

Important Note

This project is under acti. Breaking changes may be introduced in future releases. Please ensure you pin to a specific when using this in production en.

Documentation

Contributing

Contributions are welcome! Please read our Contributing Guidelines for details.

License

This project is licensed under the MIT License - see the LICENSE file for details.

Related Projects

项目信息

开发语言：Go

Star 数：49

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕An implementation of a Model Context Protocol (MCP) for the Nuclei scanner. This tool enables context-aware vulnerability scanning by intelligently providing models and context to the scanning engine, allowing for more efficient and targeted template execution展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。