ActiveDirectoryMCP - Enhanced Active Directory MCP Server

A comprehensive Python-based Model Context Protocol (MCP) server for managing Active Directory environments through LDAP. This project provides powerful tools for user management, group operations, computer account management, organizational unit administration, and security auditing.

🚀 Features

👥 Complete User Management

• Create, modify, and delete user accounts
• Password management and reset functionality
• Enable/disable user accounts
• Group membership analysis
• User permission auditing

🔐 Advanced Group Management

• Create and manage security and distribution groups
• Group scope management (Global, DomainLocal, Universal)
• Member addition and removal
• Nested group analysis
• Group membership reporting

💻 Computer Account Management

• Create and manage computer objects
• Computer account lifecycle management
• Stale computer detection
• Computer group memberships
• Service Principal Name management

🏢 Organizational Unit Operations

• Create, modify, and delete OUs
• OU hierarchy management
• Move objects between OUs
• OU content analysis
• Group Policy link information

🛡️ Security and Audit Tools

• Domain security policy analysis
• Privileged group monitoring
• Inactive user detection
• Password policy compliance checking
• Administrative account auditing
• Permission analysis and reporting

🌐 Multiple Transport Options

• Stdio Transport: Traditional MCP communication
• HTTP Transport: FastMCP-based HTTP transport on port 8813
• Docker Deployment: Production-ready containerization
• MCP Inspector: Compatible with debugging tools

🧪 Quality Assurance

• 129/129 Tests Passing: 100% test success rate across all modules
• Complete Test Coverage: All 5 tool modules fully tested
• LDAP3 Compatible: Latest library compatibility ensured
• Production Ready: Thoroughly tested and validated
• Enterprise Testing: Unit, Integration, and Performance tests
• Comprehensive Coverage: Config, LDAP, tools, workflows, and performance
• Samba AD Test Environment: Real AD protocols for testing

📋 Prerequisites

• Python 3.9 or higher
• UV package manager (recommended) or pip
• Access to Active Directory with appropriate permissions
• LDAP/LDAPS connectivity to domain controllers

🛠️ Installation

Option 1: Quick Install (Recommended)

1. Clone and set up environment:

   # Clone repository
   git clone https://github.com/alpadalar/ActiveDirectoryMCP.git
   cd ActiveDirectoryMCP
   
   # Create and activate virtual environment
   uv venv
   source .venv/bin/activate  # Linux/macOS
   # OR
   .\.venv\Scripts\Activate.ps1  # Windows
   

2. Install dependencies:

   # Install with development dependencies
   uv pip install -e ".[dev]"
   

3. Create configuration:

   # Create config directory and copy template
   mkdir -p ad-config
   cp ad-config/config.example.json ad-config/config.json
   

4. Configure Active Directory connection:

   {
       "active_directory": {
           "server": "ldap://dc.example.com:389",
           "domain": "example.com",
           "base_dn": "DC=example,DC=com",
           "bind_dn": "CN=service-account,OU=Service Accounts,DC=example,DC=com",
           "password": "your-service-account-password"
       },
       "organizational_units": {
           "users_ou": "OU=Users,DC=example,DC=com",
           "groups_ou": "OU=Groups,DC=example,DC=com",
           "computers_ou": "OU=Computers,DC=example,DC=com",
           "service_accounts_ou": "OU=Service Accounts,DC=example,DC=com"
       }
   }
   

Verifying Installation

# Test configuration
python -c "import active_directory_mcp; print('Installation OK')"

# Run tests
pytest

# Test LDAP connection
AD_MCP_CONFIG="ad-config/ad-config.json" python -m active_directory_mcp.server

🚀 Running the S

... View full README on GitHub