Bloodhound MCP Server

A Model Context Protocol (MCP) server that connects LLMs to BloodHound Community Edition and BloodHound Enterprise. Ask questions in natural

Local serverstdioPython

What is the Bloodhound MCP Server?

Bloodhound MCP connects Bloodhound MCP to AI assistants that speak the Model Context Protocol. A Model Context Protocol (MCP) server that connects LLMs to BloodHound Community Edition and BloodHound Enterprise. Ask questions in natural language, get attack path analysis, run Cypher queries, and explore Active Directory, Azure/Entra ID, and OpenGraph environments — all from your AI assistant.

What Bloodhound MCP does

A Model Context Protocol (MCP) server that connects LLMs to BloodHound Community Edition and BloodHound Enterprise. Ask questions in natural language, get attack path analysis, run Cypher queries, and explore Active Directory, Azure/Entra ID, and OpenGraph environments — all from your AI assistant.

Requirements

  • Python 3.11+ - uv - BloodHound Community Edition instance with data loaded - BloodHound API credentials (Token ID + Token Key) ---

Practical notes

  • Maintained by mwnickerson, written in Python.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
domain_infolist, info, users, groups, computers, ous, gpos, dc_syncers, foreign_admins, foreign_group_members, linked_gpos, search
user_infoinfo, sessions, memberships, admin_rights, rdp_rights, dcom_rights, ps_remote_rights, sql_admin_rights, constrained_delegation, controllables, controllers
group_infoinfo, members, memberships, admin_rights, rdp_rights, dcom_rights, ps_remote_rights, controllers, controllables
computer_infoinfo, sessions, local_admins, rdp_rights, dcom_rights, ps_remote_rights, sql_admins, constrained_delegation, controllables, controllers
ou_infoinfo, users, groups, computers, gpos
gpo_infoinfo, controllers
graph_analysisshortest_path, edge_composition, search
adcs_infotemplates, esc_paths
cypher_queryrun, saved_list, saved_get
data_qualitystats, platform_list, platform_info
asset_groupslist, members, custom_selectors
custom_nodeslist, get, create, update, delete, validate_icon, extension_list, extension_upsert, extension_delete, extension_edges
file_uploadupload, start_job, upload_to_job, upload_bytes, upload_bytes_to_job, end_job

How to install the Bloodhound MCP Server

{
  "mcpServers": {
    "bloodhound_mcp": {
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/mwnickerson/bloodhound_mcp",
        "bloodhound-mcp"
      ]
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

  • Python 3.11+ - uv - BloodHound Community Edition instance with data loaded - BloodHound API credentials (Token ID + Token Key) ---

Example prompts to try

  • “Use Bloodhound MCP to domain info.”
  • “Use Bloodhound MCP to user info.”
  • “Use Bloodhound MCP to group info.”

Frequently asked questions

A Model Context Protocol (MCP) server that connects LLMs to BloodHound Community Edition and BloodHound Enterprise. Ask questions in natural language, get attack Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.