Advertise
MCP.so
Sign In
X

Xray MCP Server

@zhangning77-tech

Repository

Basic information

Category

Other

Transports

stdio

Author

zhangning77-tech

Submitted by

zhang ning

About Xray MCP Server

This is an enhanced MCP (Model Context Protocol) server that provides xray vulnerability scanning capabilities for ModelScope hosting.

#xray#vulnerability-scanning#model-context-protocol

Xray MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "xray-mcp": {
      "command": "node",
      "args": [
        "path/xray-mcp-server/server.py"
      ],
      "env": {
        "XRAY_PATH": "path/bin/xray",
        "XRAY_OUTPUT_DIR": "path/xray-mcp-server/xray-results",
        "XRAY_CONFIG": "path/xray-mcp-server/config/xray-config.yaml"
      }
    }
  }
}

Xray MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Xray Mcp?

Xray Mcp is an enhanced MCP (Model Context Protocol) server that provides xray vulnerability scanning capabilities, designed for integration with the ModelScope hosting platform.

How to use Xray Mcp?

Install Python 3.7+ and the xray binary from chaitin/xray, then set the XRAY_PATH environment variable to point to the xray binary. Run python server.py to start the server, which reads JSON-RPC requests from stdin and writes responses to stdout. The server can also be integrated into ModelScope's MCP platform.

Key features of Xray Mcp

  • xray_scan: Perform vulnerability scans with configurable crawler type, timeout, plugins, and POC.
  • xray_version: Retrieve the installed xray scanner version.
  • xray_start_proxy (planned): Start xray in passive proxy mode with configurable port.
  • xray_stop_proxy (planned): Stop the running xray proxy.
  • xray_service_scan (planned): Scan non-HTTP services with port range and timeout.

Use cases of Xray Mcp

  • Scan web applications for vulnerabilities using basic or phantasm crawlers.
  • Automate vulnerability scanning in CI/CD pipelines via ModelScope MCP.
  • Perform targeted scans with specific plugins or POCs.
  • Set up passive proxy scanning for real-time detection (planned).
  • Scan non-HTTP services for open ports and service detection (planned).

Frequently asked questions

1

What dependencies are required?

Python 3.7+ and the xray binary from chaitin/xray. The `XRAY_PATH` environment variable must point to the xray executable.

2

Where are scan results stored?

By default, results are stored in the system temporary directory. Custom output location can be set via the `XRAY_OUTPUT_DIR` environment variable.

3

What transport protocol does the server use?

The server communicates via JSON-RPC over stdin/stdout. It works with ModelScope's MCP platform which handles the transport layer.

4

Are authentication or access controls implemented?

The README does not specify built-in authentication. It recommends implementing appropriate access controls and rate limiting when deploying in production.

5

Are all listed features currently available?

No. `xray_start_proxy`, `xray_stop_proxy`, and `xray_service_scan` are marked as planned and are not yet implemented. The currently available tools are `xray_scan` and `xray_version`.

Comments

More Other MCP servers

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

Klarix Intelligence Engine

Klarix

B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.

Glasswarp

Glasswarp

See and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.

YOUB

Connect your AI assistant to your own YOUB endurance training account. Read recorded activities with full analysis, planned sessions, race goals, wellness (HRV, sleep, resting HR) and your athletic profile. Create or mov

EverArt

modelcontextprotocol

Model Context Protocol Servers

88.1K
Advertise