MetasploitMCP

MetasploitMCP is an MCP server. It reaches msf. It needs MSF_PASSWORD to authenticate. Its repository has 751 GitHub stars and is licensed under Apache-2.0; we last read it on 2026-10-22.

MCP Server for Metasploit

MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. MetasploitMCP’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.

What does MetasploitMCP do?

MCP Server for Metasploit

How do I install MetasploitMCP?

Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/GH05TCREW/MetasploitMCP

What does MetasploitMCP connect to, and what does it need?

It reaches msf. The credentials we found in its source are MSF_PASSWORD.

Is MetasploitMCP official and is it maintained?

We found nothing naming it as a vendor’s official server. Its repository has 751 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-02-05.

What licence does MetasploitMCP use?

The repository declares the Apache-2.0 licence.

• Introduction to Model Context Protocol (Claude Academy)
• The Hugging Face MCP course
• Build an AI agent: a path with skills and MCP servers to practise on