Marshal MCP

🚀 Vulnerability Scanning MCP Server

This is an MCP server implemented based on github.com/ThinkInAIXYZ/go-mcp, designed for vulnerability scanning tasks in automated emergency response scenarios.

✨ Features

• Receive vulnerability characteristics and a list of URLs to be scanned.
• Automatically generate nuclei vulnerability scanning POCs.
• Upload POCs to the Marshal platform.
• Create scanning workflows.
• Automatically create and submit scanning tasks.
• Support custom scanning parameters (cluster, priority, port, etc.).
• Support both HTTP API and MCP protocol.

🚀 Quick Start

Installation and Running

# Clone the repository
git clone https://github.com/your-username/marshal-mcp.git
cd marshal-mcp

# Compile
go build -o marshal-mcp .

# Run
./marshal-mcp --config=config/config.yaml

Configuration File

Modify the config/config.yaml file:

# MCP server configuration
server:
  port: 8000
  timeout: 60

# Marshal API configuration
api:
  url: "http://your-marshal-api-url"  # Marshal API service address
  token: "your-api-token"             # API authentication token (required)

⚠️ Important Note

The api.token field is required for authentication with the Marshal API. Please ensure that a valid token value is set.

💻 Usage Examples

MCP Protocol

Use it in clients that support the MCP protocol.

📚 Documentation

Parameter Description

API Authentication

The Marshal API called by this server requires authentication. Authentication is done by adding an Authorization field to the HTTP request header:

Authorization: <your-token>

Ensure that the api.token field is correctly set in config/config.yaml, and the server will automatically add it to all API requests.