Nobody Pentest MCP Server v2

MCP server yang menghubungkan Claude Code dengan Nobody AI Pentest Engine. v2: Real tool execution -- tools dijalankan secara lokal, bukan hanya prompt ke API.

Features

Real Executors (lokal, tidak perlu API)

• port_scan: nmap port scan + service detection + vuln suggestions
• web_audit: technology detection, security headers, misconfigs, dir enumeration, SQLi/XSS indicators
• cve_search: CVE databases (NIST NVD + circl.lu) + exploit references
• payload_gen: reverse shell, bind shell, web shell, SQLi, XSS, command injection templates

AI-Based (via Nobody API)

• exploit_gen: AI-generated exploit code
• code_audit: AI-powered SAST
• report: AI-formatted pentest report
• custom: AI general pentest

Quick Setup

Install (Recommended)

pip install nobody-pentest-mcp

Add to Claude Code

# First, find where nobody-pentest-mcp is installed
python -c "import nobody_pentest_mcp.server; print(nobody_pentest_mcp.server.__file__)"
# Output: C:\...\Lib\site-packages\nobody_pentest_mcp\server.py

# Then add to Claude Code using the full path
claude mcp add nobody-pentest -- python "C:\...\Lib\site-packages\nobody_pentest_mcp\server.py"

# Using your own API key (for external endpoints)
claude mcp add nobody-pentest -e NOBODY_API_KEY=sk-nobody-xxx -- python "C:\...\Lib\site-packages\nobody_pentest_mcp\server.py"

Note: Claude Code does not support python -m syntax. Use full path to server.py instead.

Manual Setup

# Install dependencies
pip install mcp httpx python-nmap

# Run server
python -m nobody_pentest_mcp.server

Requirements

• Python 3.10+
• nmap (for port scanning) -- https://nmap.org/download.html
• mcp pip package
• httpx pip package
• python-nmap pip package (optional, nmap CLI works too)
• NOBODY_API_KEY (optional for Nobody AI endpoint, required for external endpoints)

API Key

Using Default Nobody AI Endpoint (v2.nobody0x.com)

API key is optional. The default endpoint handles authentication automatically.

# Just install and use
pip install nobody-pentest-mcp
claude mcp add nobody-pentest nobody-pentest-mcp

Using External Endpoints (OpenAI, OpenRouter, etc.)

API key is required. Set it via environment variable or .env file.

# Set API key
export NOBODY_API_KEY=sk-your-key-here

# Or use .env file
echo "NOBODY_API_KEY=sk-your-key-here" > .env

Architecture

User (Claude Code)
    | MCP protocol (tool call)
Nobody Pentest MCP Server (local)
    |-- REAL EXECUTION: nmap, httpx, CVE APIs, templates
    |-- AI EXECUTION: POST /v1/messages -> Backend AI
    v
Results returned to Claude Code

Tools

Environment Variables