AI Tools

metasploit-mcp

metasploit-mcp is Metasploit’s official MCP server, msfmcpd. It exposes the Metasploit framework over the Model Context Protocol, so an AI assistant can search for modules, set options, and run exploits and post-exploitation through the same engine you’d drive by hand in msfconsole — but orchestrated in natural language. It’s the AI-agent front door to the single most important tool in offensive security, and because it ships inside Metasploit itself, it needs nothing extra installed.

msfmcpd comes with Metasploit, which is already in the toolkit, so it appears in two places — here at Security → AI Tools → metasploit-mcp, and under Exploitation Tools alongside the rest of Metasploit.

The help it prints

MSF MCP Server v0.1.0
Model Context Protocol server for Metasploit Framework

Usage: msfmcp [options]
        --config PATH                Path to configuration file
        --enable-logging             Enable file logging
        --log-file PATH              Log file path (overrides config file)
        --user USER                  MSF API username (for MessagePack auth)
        --password PASS              MSF API password (for MessagePack auth)
        --no-auto-start-rpc          Disable automatic RPC server startup
        --mcp-transport TRANSPORT    MCP server transport type ('stdio' or 'http')
        --enable-dangerous-actions   Enable destructive MCP tools (module execution, session control)
    -h, --help                       Show this help message
    -v, --version                    Show version information

Using it

Start msfmcpd — it launches the MCP server fronting Metasploit. (Metasploit’s PostgreSQL database should be running; start it from Running Services.)
Connect an MCP client — point an MCP-capable AI assistant at the server.
Drive Metasploit in natural language — ask the agent to find a module for a service, configure a payload, or launch a handler, and it operates the framework for you.

For a broader agent toolbox beyond Metasploit, see hexstrike-ai.