1. Conduid
  2. Developer Tools
  3. Spiderfoot MCP
MCP server · Developer Tools

Spiderfoot MCP

by · github.com/marlinkcyber/spiderfoot-mcp

A Model Context Protocol (MCP) server that provides SpiderFoot OSINT automation capabilities to AI assistants and other MCP clients.

Unclaimed MIT last commit a year ago devtools
InstallView source
49Fair

Scored 2 days ago · breakdown

About Spiderfoot MCP

Spiderfoot MCP is an MCP server published by marlinkcyber in the Developer Tools category: a Model Context Protocol (MCP) server that provides SpiderFoot OSINT automation capabilities to AI assistants and other MCP clients. It has been installed 0 times through Conduid.

The repository has 3 stars and 1 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx spiderfoot-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Spiderfoot MCP

Powered by Claude · Grounded in docs

I know everything about Spiderfoot MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v1.0.0v1.0.0

README

SpiderFoot MCP Server

A Model Context Protocol (MCP) server that provides SpiderFoot OSINT automation capabilities to AI assistants and other MCP clients.

Installation

pip install spiderfoot-mcp

Configuration

Set the following environment variables or create a .env file:

SPIDERFOOT_URL=http://localhost:5001
SPIDERFOOT_USERNAME=admin
SPIDERFOOT_PASSWORD=your_password

Usage

As MCP Server

Start the MCP server:

spiderfoot-mcp

The server will expose SpiderFoot functionality as MCP tools that can be used by AI assistants.

Available Tools

The MCP server provides the following tools:

  • start_scan: Start a new SpiderFoot scan
  • get_scan_status: Get the current status of a scan
  • list_scans: List all scans on the server
  • stop_scan: Stop a running scan
  • delete_scan: Delete a scan and its data
  • get_scan_results: Get results from a scan
  • get_scan_summary: Get a summary of scan results
  • wait_for_scan_completion: Wait for a scan to complete
  • export_scan_results: Export scan results in various formats
  • get_available_modules: Get list of available SpiderFoot modules
  • search_scan_results: Search across scan results
  • get_scan_log: Get log entries for a scan
  • get_active_scans_summary: Get summary of tracked scans
  • ping: Test connectivity to SpiderFoot server

MCP Client Configuration

To use this server with Claude Desktop or other MCP clients, add the following to your MCP configuration:

{
  "mcpServers": {
    "spiderfoot": {
      "command": "spiderfoot-mcp",
      "env": {
        "SPIDERFOOT_URL": "http://localhost:5001",
        "SPIDERFOOT_USERNAME": "admin",
        "SPIDERFOOT_PASSWORD": "your_password"
      }
    }
  }
}

Requirements

  • Python 3.8+
  • spiderfoot-client>=1.0.0
  • fastmcp>=2.10.0
  • python-dotenv>=1.0.0
  • A running SpiderFoot instance

Dependencies

This package depends on the spiderfoot-client package, which provides the underlying SpiderFoot API client functionality.

License

MIT License

README mirrored from the source repository 2 days ago. The original is authoritative.

Questions

About Spiderfoot MCP

How do I install Spiderfoot MCP?

Run npx spiderfoot-mcp, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Spiderfoot MCP safe to use with an AI agent?

Its trust score is 49 out of 100 (fair). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Spiderfoot MCP still maintained?

The last commit was a year ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.