MCP Hydra

@atiilla

Basic information

About MCP Hydra

A lightweight, extensible cybersecurity toolkit that connects AI assistants to security tools through the Model Context Protocol (MCP), enabling AI-assisted security research, scanning, and analysis.

#osint #scanning #vulnerability

MCP Hydra config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "hydramcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "--name",
        "hydramcp",
        "hydramcp"
      ]
    }
  }
}

MCP Hydra tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Mcp-Hydra?

Mcp-Hydra is a lightweight, extensible cybersecurity toolkit that connects AI assistants to security tools through the Model Context Protocol (MCP), enabling AI-assisted security research, scanning, and analysis. It is designed for security researchers and penetration testers who want to leverage AI for automated reconnaissance and vulnerability assessment.

How to use Mcp-Hydra?

Build the Docker image from the repository (git clone, docker build), then add the server configuration to your AI client’s MCP settings (e.g., claude_desktop_config.json for Claude Desktop, or .vscode/mcp.json for VS Code Copilot). The server runs inside a Docker container using the command docker run --rm -i --name hydramcp hydramcp.

Key features of Mcp-Hydra

Connects AI assistants to eight pre-installed security tools
Docker-based deployment for isolation and portability
Supports Sublist3r, DNSRecon, Holehe, Nmap, OCR, Sqlmap, WPScan, and Zmap
Lightweight and extensible with planned tool additions
Provides example prompts for each integrated tool
Open-source under the MIT license

Use cases of Mcp-Hydra

Enumerate subdomains for a target domain using Sublist3r
Perform DNS reconnaissance with DNSRecon
Check if an email is registered on multiple websites via Holehe
Scan a host for open ports using Nmap or a subnet for open ports with Zmap
Automate SQL injection testing on web forms with Sqlmap

Frequently asked questions

What tools are included in Mcp-Hydra?

Mcp-Hydra currently includes Sublist3r, DNSRecon, Holehe, Nmap, OCR (optical character recognition), Sqlmap, WPScan, and Zmap.

How do I install Mcp-Hydra?

Clone the repository, then build the Docker image with `docker build -t hydramcp .`. No additional dependencies are required beyond Docker.

Which AI assistants are supported?

Mcp-Hydra works with any MCP-compatible client, such as Claude Desktop and VS Code Copilot, by configuring the server in their JSON settings.

Is Mcp-Hydra open source?

Yes, it is open-source under the MIT license, and contributions are welcome via forking and pull requests.

What are the planned future tools?

Planned tools include gobuster, TheHarvester, Shodan, Nuclei, Amass, and more, as listed in the project’s changelog.

Comments

More Developer Tools MCP servers

Eddyter AI Rich Text Editor MCP

EddyterAI

Set up and manage the Eddyter AI rich text editor by talking to your AI agent — for Claude, Cursor, Codex and other MCP tools. A Model Context Protocol server that lets AI tools add Eddyter to a React, Next.js, Vite or R

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

Testiny MCP server

Mategra GmbH

Testiny is a test case management platform. Its remote MCP server lets AI assistants such as Claude, ChatGPT, GitHub Copilot, Cursor and other MCP clients work directly with your Testiny data. Browse and search projects,

Official Porkbun MCP Server

Porkbun LLC

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.