Advertise
MCP.so
Sign In
X

Xray MCP Server

@zhangning77-tech

Repository

Basic information

Category

Other

Last updated

Transports

stdio

Author

zhangning77-tech

Submitted by

zhang ning

About Xray MCP Server

This is an enhanced MCP (Model Context Protocol) server that provides xray vulnerability scanning capabilities for ModelScope hosting.

#xray#vulnerability-scanning#model-context-protocol

Xray MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "xray-mcp": {
      "command": "node",
      "args": [
        "path/xray-mcp-server/server.py"
      ],
      "env": {
        "XRAY_PATH": "path/bin/xray",
        "XRAY_OUTPUT_DIR": "path/xray-mcp-server/xray-results",
        "XRAY_CONFIG": "path/xray-mcp-server/config/xray-config.yaml"
      }
    }
  }
}

Xray MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Xray Mcp?

Xray Mcp is an enhanced MCP (Model Context Protocol) server that provides xray vulnerability scanning capabilities, designed for integration with the ModelScope hosting platform.

How to use Xray Mcp?

Install Python 3.7+ and the xray binary from chaitin/xray, then set the XRAY_PATH environment variable to point to the xray binary. Run python server.py to start the server, which reads JSON-RPC requests from stdin and writes responses to stdout. The server can also be integrated into ModelScope's MCP platform.

Key features of Xray Mcp

  • xray_scan: Perform vulnerability scans with configurable crawler type, timeout, plugins, and POC.
  • xray_version: Retrieve the installed xray scanner version.
  • xray_start_proxy (planned): Start xray in passive proxy mode with configurable port.
  • xray_stop_proxy (planned): Stop the running xray proxy.
  • xray_service_scan (planned): Scan non-HTTP services with port range and timeout.

Use cases of Xray Mcp

  • Scan web applications for vulnerabilities using basic or phantasm crawlers.
  • Automate vulnerability scanning in CI/CD pipelines via ModelScope MCP.
  • Perform targeted scans with specific plugins or POCs.
  • Set up passive proxy scanning for real-time detection (planned).
  • Scan non-HTTP services for open ports and service detection (planned).

Frequently asked questions

1

What dependencies are required?

Python 3.7+ and the xray binary from chaitin/xray. The `XRAY_PATH` environment variable must point to the xray executable.

2

Where are scan results stored?

By default, results are stored in the system temporary directory. Custom output location can be set via the `XRAY_OUTPUT_DIR` environment variable.

3

What transport protocol does the server use?

The server communicates via JSON-RPC over stdin/stdout. It works with ModelScope's MCP platform which handles the transport layer.

4

Are authentication or access controls implemented?

The README does not specify built-in authentication. It recommends implementing appropriate access controls and rate limiting when deploying in production.

5

Are all listed features currently available?

No. `xray_start_proxy`, `xray_stop_proxy`, and `xray_service_scan` are marked as planned and are not yet implemented. The currently available tools are `xray_scan` and `xray_version`.

Comments

More Other MCP servers

Soar Flight Booking MCP

Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.

Arsen MCP

Arsen Security

Run advanced phishing, voice phishing, deepfake fraud simulations, and cybersecurity awareness training from your AI assistant.

Reactive Resume

amruthpillai

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

39.5K
N

Next Generation Movers: free moving quotes (remote MCP)

Next Generation Movers

Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40

Klarix Intelligence Engine

Klarix

B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.

Advertise