漏洞扫描 MCP 服务器

What is 漏洞扫描 MCP 服务器?

漏洞扫描 MCP 服务器 is an MCP server based on the go-mcp library that automates vulnerability scanning tasks during emergency response. It integrates with the Marshal platform to generate nuclei POCs, create scan workflows, and submit scanning tasks.

How to use 漏洞扫描 MCP 服务器?

Clone the repository, build with go build -o marshal-mcp ., then run with ./marshal-mcp --config=config/config.yaml. Edit config/config.yaml to set the Marshal API URL and a valid API token. The server listens on port 8000 by default.

Key features of 漏洞扫描 MCP 服务器

• Receives vulnerability characteristics and a list of URLs.
• Automatically generates nuclei vulnerability scan POCs.
• Uploads POCs to the Marshal platform.
• Creates scanning workflows and submits tasks.
• Supports custom scan parameters (cluster, priority, port, etc.).
• Offers both HTTP API and MCP protocol access.

Use cases of 漏洞扫描 MCP 服务器

• Automate vulnerability scanning during security incident response.
• Integrate emergency response workflows with the Marshal platform.
• Generate and deploy nuclei POCs for newly discovered vulnerabilities.
• Schedule periodic scanning with configurable intervals and options.

FAQ from 漏洞扫描 MCP 服务器

What is the purpose of 漏洞扫描 MCP 服务器?

It automates vulnerability scanning for emergency response by generating nuclei POCs, uploading them to the Marshal platform, creating workflows, and submitting tasks.

How is authentication handled?

The server requires an API token set in config.yaml under api.token. It is automatically added to all Marshal API requests via the Authorization header.

What parameters are required for a scanning task?

The required parameters are vuln_name, vuln_desc, urls, and cluster. Optional parameters include priority, task_name, task_num, cycle_scan, domain, ip, port, engine, and interval_days.

Does this server support the MCP protocol?

Yes, it supports both the MCP protocol and HTTP API.

What are the default scanning settings?

The default priority is “low”, default port range is 1–65535, default scan engine is “naabu”, and default scan interval is 7 days.