Bridges LLMs and the Metasploit Framework so penetration testing workflows can be driven in natural language.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add metasploit --env MSF_PASSWORD='<MSF_PASSWORD>' -- python MetasploitMCP.py --transport stdio~/.codex/config.toml
[mcp_servers.metasploit]
command = "python"
args = ["MetasploitMCP.py", "--transport", "stdio"]
env = { MSF_PASSWORD = "<MSF_PASSWORD>" }
# codex mcp add metasploit --env MSF_PASSWORD='<MSF_PASSWORD>' -- python MetasploitMCP.py --transport stdio~/.cursor/mcp.json
{
"mcpServers": {
"metasploit": {
"command": "python",
"args": [
"MetasploitMCP.py",
"--transport",
"stdio"
],
"env": {
"MSF_PASSWORD": "<MSF_PASSWORD>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"metasploit": {
"type": "stdio",
"command": "python",
"args": [
"MetasploitMCP.py",
"--transport",
"stdio"
],
"env": {
"MSF_PASSWORD": "<MSF_PASSWORD>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"metasploit": {
"command": "python",
"args": [
"MetasploitMCP.py",
"--transport",
"stdio"
],
"env": {
"MSF_PASSWORD": "<MSF_PASSWORD>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"metasploit": {
"command": "python",
"args": [
"MetasploitMCP.py",
"--transport",
"stdio"
],
"env": {
"MSF_PASSWORD": "<MSF_PASSWORD>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"metasploit": {
"command": "python",
"args": [
"MetasploitMCP.py",
"--transport",
"stdio"
],
"env": {
"MSF_PASSWORD": "<MSF_PASSWORD>"
}
}
}
}Environment variables
MSF_PASSWORD
Replace the placeholders with your own credentials and keep them out of version control.