1. Conduid
  2. Security
  3. Metasploit MCP Server
MCP server · Security

Metasploit MCP Server

This Model Context Protocol (MCP) server enables AI assistants to interact with and execute Metasploit Framework commands through a standardized interface. The server wraps Metasploit functionality into MCP tools that can be discovered and used by compatible clients like Claude.

20Low

Scored just now · breakdown

About Metasploit MCP Server

Metasploit MCP Server is an MCP server published by RobertoDure in the Security category: this Model Context Protocol (MCP) server enables AI assistants to interact with and execute Metasploit Framework commands through a standardized interface. The server wraps Metasploit functionality into MCP tools that can be discovered and used by compatible clients like Claude.

The repository has 2 stars and 0 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/RobertoDure/metasploit-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Metasploit MCP Server

Powered by Claude

Ask about Metasploit MCP Server — answers draw on its README.

Security checks

6 checks have not been run yet.

Questions

About Metasploit MCP Server

How do I install Metasploit MCP Server?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Metasploit MCP Server safe to use with an AI agent?

Its trust score is 20 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Metasploit MCP Server still maintained?

The last commit was a year ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.