WASS-MCP

A Model Context Protocol (MCP) server for web application security scanning.

Features

• MCP Protocol Support - Full compatibility with MCP clients (Claude, etc.)
• Nikto Integration - Web server vulnerability scanning
• Nuclei Integration - Template-based vulnerability scanning
• Wapiti Integration - Web application vulnerability scanning
• Shcheck Integration - Security headers analysis
• Execution History - Persistent storage of scan results
• Stateless Design - Survives server restarts without session errors
• RESTful HTTP Transport - Streamable HTTP-based MCP protocol

Usage

docker run -p 127.0.0.1:8989:8989 tb0hdan/wass-mcp

MCP Client Configuration

Example command to add WASS-MCP server to Claude MCP clients:

claude mcp add wass-mcp --transport http http://127.0.0.1:8989

or Gemini:

gemini mcp add wass-mcp --transport http http://127.0.0.1:8989

Available Tools

nikto

Perform web server vulnerability scans using Nikto.

Parameters:

Name	Type	Required	Description
host	string	Yes	Target hostname or IP address
port	integer	No	Target port (default: 80)
vhost	string	No	Virtual host header
max_lines	integer	No	Maximum output lines
offset	integer	No	Output line offset

Example:

{
  "host": "192.168.1.100",
  "port": 443
}

nuclei

Perform template-based vulnerability scanning using Nuclei.

Parameters:

Name	Type	Required	Description
host	string	Yes	Target hostname or IP address
port	integer	No	Target port (default: 80)
vhost	string	No	Virtual host header
max_lines	integer	No	Maximum output lines
offset	integer	No	Output line offset

Vulnerabilities Detected:

• CVE detection via community templates
• Misconfigurations
• Exposed panels/dashboards
• Default credentials
• Technology detection
• Security headers analysis
• And many more via 8000+ community templates

Example:

{
  "host": "192.168.1.100",
  "port": 443
}

wapiti

Perform comprehensive web application vulnerability scans using Wapiti.

Parameters:

Name	Type	Required	Description
host	string	Yes	Target hostname or IP address
port	integer	No	Target port (default: 80)
vhost	string	No	Virtual host header
max_lines	integer	No	Maximum output lines
offset	integer	No	Output line offset

Vulnerabilities Detected:

• SQL Injection / Blind SQL Injection
• Cross-Site Scripting (XSS)
• File Inclusion / Path Traversal
• Command Execution
• CRLF Injection
• Server-Side Request Forgery (SSRF)
• Open Redirects
• HTTP Security Headers
• Content Security Policy issues

Example:

{
  "host": "192.168.1.100",
  "port": 8080
}

shcheck_py

Analyze HTTP security headers using shcheck.py.

Parameters:

Name	Type	Required	Description
host	string	Yes	Target hostname or IP address
port	integer	No	Target port (default: 80)
vhost	string	No	Virtual host header
max_lines	integer	No	Maximum output lines
offset	integer	No	Output line offset

Headers Analyzed:

• Content-Security-Policy
• Strict-Transport-Security
• X-Frame-Options
• X-Content-Type-Options
• Referrer-Policy
• Permissions-Policy
• And other security-relevant headers

Example:

{
  "host": "example.com",
  "port": 443
}

full_scan

Perform a comprehensive security scan using all available scanners in parallel.

Parameters:

Name	Type	Required	Description
host	string	Yes	Target hostname or IP address
port	integer	No

... View full README on GitHub