BloodHound MCPServer

stevenyu113228
GitHub
Active DirectoryNatural Language ProcessingSecurity Analysis

Loading subscription status...

💡 Description

BloodHound MCP is an innovative extension of the BloodHound tool, designed to allow Large Language Models (LLMs) to interact with Active Directory (AD) and Azure Active Directory (AAD) environments through natural language queries. By leveraging the power of LLMs, users can execute complex queries and extract information from their AD/AAD environments using simple conversational commands.

📝 JSON Entries

{
  "mcpServers": [
    {
      "BloodHound": {
        "env": {
          "BLOODHOUND_URI": "bolt://localhost:7687",
          "BLOODHOUND_PASSWORD": "bloodhound",
          "BLOODHOUND_USERNAME": "neo4j"
        },
        "args": [
          "run",
          "--with",
          "mcp[cli],neo4j",
          "mcp",
          "run",
          "<PATH_TO_THE_PROJECT>server.py"
        ],
        "command": "uv"
      }
    }
  ]
}

🛠️ Tools

tool://route_all_owned_enabled_non_privileged_group_membershipstool://list_all_enabled_users_with_password_never_expires_not_changed_last_yeartool://list_all_owned_enabled_users_with_rdp_and_sessionstool://route_all_owned_enabled_users_with_dangerous_rights_to_groupstool://route_from_owned_enabled_users_to_unconstrained_delegationtool://find_all_owned_users_where_group_grants_azure_privileged_accesstool://list_enabled_non_privileged_users_with_local_admin_and_sessionstool://route_non_privileged_users_with_dangerous_rights_to_users

Features

  • Natural language queries
  • LLM powered analysis
  • Seamless integration with existing BloodHound data in Neo4j
  • Customizable for specific environments and tools