abdoahmedelbanaa/phantom-mcp

---

🏛️ Project Overview

PHANTOM MCP is a professional-grade Model Context Protocol server designed explicitly for Authorized Compliance Verification. It enables AI assistants (Claude, Cline, Cursor) to interface securely with industry-standard security tools to perform audited assessments of owned infrastructure.

👤 Author & Maintainer

• Lead Architect: Mohamed Khalifa
• Portfolio: mokhalifa.site

---

⚡ Features & Capabilities

Phantom MCP bridges the gap between natural language and enterprise security auditing.

🛡️ Core Compliance Modules

• Network Assurance (NIST 800-115): Deep infrastructure analysis, port verification, service fingerprinting.
• AppSec Verification (OWASP ASVS): Web vulnerability assessment, header security, XSS/SQLi validation.
• Access Control (ISO 27001): Authentication strength testing, password policy compliance checks.
• Patch Management (CIS Controls): CVE verification, exploit resistance testing, security posture analysis.

🔌 Universal Compatibility

• Native MCP Support: Works out-of-the-box with Claude Desktop.
• Extension Support: Fully optimized for Cline and Cursor.
• Containerization: Production-ready Docker build included.
• Legacy Support: Python stdio fallback for generic clients.

---

🚀 Installation & Usage (Absolute Guide)

1. Claude Desktop (Native)

To use Phantom with the official Claude Desktop app:

1. Locate your config file:
   • Windows: %APPDATA%\Claude\claude_desktop_config.json
   • Mac: ~/Library/Application Support/Claude/claude_desktop_config.json
2. Add the following exact configuration:

{
  "mcpServers": {
    "phantom": {
      "command": "python",
      "args": [
        "C:\\path\\to\\phantom-mcp\\phantom_mcp.py"
      ],
      "env": {
        "PHANTOM_SAFE_MODE": "false"
      }
    }
  }
}

(Replace C:\\path\\to\\phantom-mcp with your actual absolute path)

2. Cline (VS Code Extension)