How do I install the metasploitmcp mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `MSF_PASSWORD`, `RHOSTS`, `LHOST`, `PAYLOAD_SAVE_DIR` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

MetasploitMCP MCP Server

A Model Context Protocol (MCP) server for Metasploit Framework integration.

Local serverstdioPython

What is the MetasploitMCP MCP Server?

A Model Context Protocol (MCP) server for Metasploit Framework integration.

The short version

This MCP server provides a bridge between large language models like Claude and the Metasploit Framework penetration testing platform. It allows AI assistants to dynamically access and control Metasploit functionality through standardized tools, enabling a natural language interface to complex security testing workflows.

What it needs from you

Metasploit Framework installed and msfrpcd running - Python 3.10 or higher - Required Python packages (see requirements.txt)

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the MetasploitMCP MCP Server

{
  "mcpServers": {
    "metasploit": {
      "command": "uv",
      "args": [
        "--directory",
        "C:\\path\\to\\MetasploitMCP",
        "run",
        "MetasploitMCP.py",
        "--transport",
        "stdio"
      ],
      "env": {
        "MSF_PASSWORD": "YOUR_MSF_PASSWORD"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

Metasploit Framework installed and msfrpcd running - Python 3.10 or higher - Required Python packages (see requirements.txt)

Variable	Description	Required
MSF_PASSWORD	Declared in the maintainer’s client configuration.	Check documentation

Frequently asked questions

A Model Context Protocol (MCP) server for Metasploit Framework integration. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.