Roadrecon MCP Server

🚀 ROADRecon MCP Server

This MCP (Model Context Protocol) server provides AI assistants like Claude with secure access to your ROADRecon Azure AD data for analysis.

The excellent ROADtools suite, developed by dirkjanm, can be found here: ROADRecon

✨ Features

• Resources: Access Azure AD data from your ROADRecon instance.
• Tools: Perform security analysis on the data.
• Prompts: Pre - built analysis templates for common security tasks.

📦 Installation

Prerequisites

• Python 3.8+
• A running ROADRecon instance with accessible Web GUI (default: http://localhost:5000)
• An MCP - compatible client (such as Claude Desktop)

Steps

1. Clone this repository.
2. Install the dependencies:

   pip install -r requirements.txt
   

💻 Usage Examples

Running the Server

1. Ensure the ROADRecon GUI is running (default: http://localhost:5000).
2. Run the MCP server:

   python roadrecon_mcp_server.py
   

3. Specify a different ROADRecon URL:

   ROADRECON_URL=http://localhost:8080 python roadrecon_mcp_server.py
   

Connecting with Claude Desktop

1. Open Claude Desktop.
2. Go to Settings → Servers → Add Server.
3. Select "Add from running server".
4. The server should appear in the list. Click "Install".

For more details on this step, see here: https://modelcontextprotocol.io/quickstart/server

Using in Claude

Once connected, Claude can:

• Access Azure AD data via resources (e.g., roadrecon://users).
• Run security analysis using tools (e.g., find_privileged_users).
• Use pre - built prompts for common security tasks.

Example Queries

• "Analyze the MFA status of users in this Azure AD tenant."
• "Find all users with highly privileged roles."
• "Check applications with secrets or certificates."
• "Analyze the overall security posture of this Azure AD environment."

Example Image

Available Resources

• roadrecon://stats - Summary statistics
• roadrecon://users - All users
• roadrecon://users/{id} - User details
• roadrecon://groups - All groups
• roadrecon://groups/{id} - Group details
• roadrecon://applications - All applications
• roadrecon://applications/{id} - Application details
• roadrecon://azuread - Azure AD data
• roadrecon://config - Configuration

Available Tools

• find_privileged_users() - Find users with high privileges
• analyze_password_policy() - Analyze the password policy
• check_mfa_status() - Check the MFA status
• list_groups() - List all groups
• get_group_memberships() - Get group memberships
• _audit_logins() - Audit login records

Available Prompts

• Analyze highly privileged users
• Check security policy compliance
• Evaluate MFA coverage
• Review group structure and membership
• Identify unaudited external access

📄 License

MIT