Advertise
MCP.so
Sign In

BloodHound MCP Server

@MorDavid

RepositoryHomepage

Basic information

Category

Other

Transports

stdio

Author

MorDavid

About BloodHound MCP Server

BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language instead of complex Cypher queries.

#bloodhound#active-directory#security-analysis

BloodHound MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "BloodHound-MCP": {
      "command": "python",
      "args": [
        "<Your_Path>\\BloodHound-MCP.py"
      ],
      "env": {
        "BLOODHOUND_URI": "bolt://localhost:7687",
        "BLOODHOUND_USERNAME": "neo4j",
        "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
      }
    }
  }
}

BloodHound MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is BloodHound-MCP?

BloodHound-MCP is a Model Context Protocol (MCP) server that connects AI assistants to BloodHound, the industry-standard tool for Active Directory security analysis. It lets security professionals query BloodHound data and explore AD attack paths using natural language instead of manual Cypher queries.

How to use BloodHound-MCP?

Clone the repository, install dependencies with pip install -r requirements.txt, then configure the MCP server by setting the BLOODHOUND_URI, BLOODHOUND_USERNAME, and BLOODHOUND_PASSWORD environment variables. Once configured, you can ask natural-language questions about your Active Directory environment through any MCP-compatible client.

Key features of BloodHound-MCP

  • Natural-language interface for querying BloodHound data
  • Over 75 specialized tools based on original BloodHound CE Cypher queries
  • Domain structure mapping and privilege escalation path analysis
  • Kerberos security issue detection (Kerberoasting, AS-REP Roasting)
  • Certificate services vulnerability identification
  • NTLM relay attack vector discovery

Use cases of BloodHound-MCP

  • Show all attack paths from kerberoastable users to Domain Admins
  • Find computers where Domain Users have local admin rights
  • Identify Domain Controllers vulnerable to NTLM relay attacks
  • Map all Active Directory certificate services vulnerabilities
  • Generate comprehensive security reports for a domain

Frequently asked questions

1

What prerequisites are needed?

BloodHound 4.x+ with data collected from an Active Directory environment, a Neo4j database loaded with BloodHound data, Python 3.8 or higher, and an MCP client.

2

How do I configure the server connection?

Set the `BLOODHOUND_URI`, `BLOODHOUND_USERNAME`, and `BLOODHOUND_PASSWORD` environment variables in your MCP client configuration (default URI is `bolt://localhost:7687`).

3

Is this an official Anthropic product?

No. BloodHound-MCP is a community-driven integration between BloodHound and MCP, not an official Anthropic product.

4

What kind of queries can I ask?

You can ask natural-language questions about Active Directory attack paths, privilege escalation, Kerberos issues, certificate services vulnerabilities, delegation abuse, AD hygiene, and more.

5

What license is this project under?

This project is licensed under the MIT License.

Comments

More Other MCP servers

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3

Klarix Intelligence Engine

Klarix

B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.

EverArt

modelcontextprotocol

Model Context Protocol Servers

88.1K

Figs, Relationship Expert

Figs O'Sullivan, LMFT

Couples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep

MaxKB

1Panel-dev

🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。

22.0K
Advertise