MMCPMarkets
AP

abdoahmedelbanaa/phantom-mcp

开发工具

本页由 AI 翻译，技术细节请以原文为准。 查看原文

0 stars 18 forks 质量 65 趋势 0
Repository Install

Authorized Security Auditing for the Modern Enterprise Explore the Docs » · View Demo · Report Bug

概览

Authorized Security Auditing for the Modern Enterprise Explore the Docs » · View Demo · Report Bug is a professional-grade Model Context Protocol server designed explicitly for . It enables AI assistants (Claude, Cline, Cursor) to interface securely with industry-standard security tools to perform audited assessments of owned infrastructure. Phantom MCP bridges the gap between natural language and enterprise security auditing. * Deep infrastructure analysis, port verification, service fingerprinting. * Web vulnerability assessment, header security, XSS/SQLi validation. * Authentication strength testing, password policy compliance checks. * CVE verification, exploit resistance testing, security posture analysis. * Works out-of-the-box with Claude Desktop. * Fully optimized for Cline and Cursor. * Production-ready Docker build included. * Python stdio fallback for generic clients. To use Phantom with the official Claude Desktop app: 1.

README

以下为原文 README 节选，完整内容请查看原文。

🏛️ Project Overview

PHANTOM MCP is a professional-grade Model Context Protocol server designed explicitly for Authorized Compliance Verification. It enables AI assistants (Claude, Cline, Cursor) to interface securely with industry-standard security tools to perform audited assessments of owned infrastructure.

👤 Author & Maintainer

⚡ Features & Capabilities

Phantom MCP bridges the gap between natural language and enterprise security auditing.

🛡️ Core Compliance Modules

  • Network Assurance (NIST 800-115): Deep infrastructure analysis, port verification, service fingerprinting.
  • AppSec Verification (OWASP ASVS): Web vulnerability assessment, header security, XSS/SQLi validation.
  • Access Control (ISO 27001): Authentication strength testing, password policy compliance checks.
  • Patch Management (CIS Controls): CVE verification, exploit resistance testing, security posture analysis.

🔌 Universal Compatibility

  • Native MCP Support: Works out-of-the-box with Claude Desktop.
  • Extension Support: Fully optimized for Cline and Cursor.
  • Containerization: Production-ready Docker build included.
  • Legacy Support: Python stdio fallback for generic clients.

🚀 Installation & Usage (Absolute Guide)

1. Claude Desktop (Native)

To use Phantom with the official Claude Desktop app:

  1. Locate your config file:
    • Windows: %APPDATA%\Claude\claude_desktop_config.json
    • Mac: ~/Library/Application Support/Claude/claude_desktop_config.json
  2. Add the following exact configuration:
{
  "mcpServers": {
    "phantom": {
      "command": "python",
      "args": [
        "C:\\path\\to\\phantom-mcp\\phantom_mcp.py"
      ],
      "env": {
        "PHANTOM_SAFE_MODE": "false"
      }
    }
  }
}

(Replace C:\\path\\to\\phantom-mcp with your actual absolute path)

2. Cline (VS Code Extension)

在 GitHub 查看完整 README

安装

docker run -i --rm phantom-mcp
新手？先看 mcpskill.org 教程 →

配置

{ "mcpServers": { "phantom": { "command": "python", "args": [ "C:\\path\\to\\phantom-mcp\\phantom_mcp.py" ], "env": { "PHANTOM_SAFE_MODE": "false" } } } }