ROADrecon Analyzer

by atomicchonk

30 stars

143 downloads

Not rated

GitHub

About

Exposes Azure AD security data collected by ROADrecon for analyzing tenant security posture, identifying privileged users, evaluating MFA status, detecting stale accounts, and assessing PIM implementation.

Details

Author: atomicchonk
Repository: atomicchonk/roadrecon_mcp_server
GitHub stars: 30
Downloads: 143
License: MIT License
Categories: Design, Developer Tools, AI, Security, Infrastructure, Frontend, API, Other

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below
Plugin Name ROADrecon Analyzer

Command (node, npx, python, etc.) npx
Arguments
- Argument 1 -y
- Argument 2 @highlight/mcp-server
Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "/c",
                "npx",
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "cmd"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "/c",
                "npx",
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "cmd"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "/c",
                "npx",
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "cmd"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "/c",
                "npx",
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "cmd"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "/c",
                "npx",
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "cmd"
        }
    }
}

JSON

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

From the repository

1. Make sure your ROADRecon GUI is running (default: http://localhost:5000)

2. Run the MCP server:

   python roadrecon_mcp_server.py

3. To specify a different ROADRecon URL:

   ROADRECON_URL=http://localhost:8080 python roadrecon_mcp_server.py

`find_privileged_users()`

Find users with high-privilege roles.

`analyze_mfa_status()`

Analyze MFA deployment across users.

`find_applications_with_secrets()`

Find applications with secrets/certificates.

`analyze_groups()`

Analyze group types and membership.

`identify_stale_accounts()`

Find accounts that haven't logged in or changed password within a specified period.

`analyze_pim_implementation()`

Assess Privileged Identity Management implementation.

`analyze_service_principal_credentials()`

Find over-permissioned service principals with long-lived credentials.

`analyze_legacy_authentication()`

Identify risks from legacy authentication protocols that bypass MFA.

`analyze_conditional_access_policies(file_path: str = '')`

Analyze conditional access policies from an HTML file. Looks for the file at 'C:\Temp\caps.html' by default, or prompts the user to specify a file path if not found.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "roadrecon analyzer": {
            "env": {},
            "args": [
                "-y",
                "@highlight/mcp-server"
            ],
            "command": "npx"
        }
    }
}

Linux

{
    "env": [],
    "args": [
        "-y",
        "@highlight/mcp-server"
    ],
    "command": "npx"
}

Macos

{
    "env": [],
    "args": [
        "-y",
        "@highlight/mcp-server"
    ],
    "command": "npx"
}

Windows

{
    "env": [],
    "args": [
        "/c",
        "npx",
        "-y",
        "@highlight/mcp-server"
    ],
    "command": "cmd"
}

ROADrecon MCP Server

This MCP (Model Context Protocol) server provides AI assistants like Claude with access to your ROADRecon Azure AD data for security analysis.

The amazing ROADtools suite by dirkjanm can be found here: ROADRecon

Features

- Resources: Access Azure AD data from your ROADRecon instance
- Tools: Run security analysis on the data
- Prompts: Pre-built analysis templates for common security tasks

Prerequisites

- Python 3.8+
- A running ROADRecon instance with the web GUI accessible
- MCP-compatible client (Claude Desktop, etc.)

Installation

1. Clone this repository
2. Install dependencies:

   pip install -r requirements.txt

Usage

Running the server

1. Make sure your ROADRecon GUI is running (default: http://localhost:5000)

2. Run the MCP server:

   python roadrecon_mcp_server.py

3. To specify a different ROADRecon URL:

   ROADRECON_URL=http://localhost:8080 python roadrecon_mcp_server.py

Connecting with Claude Desktop

1. Open Claude Desktop
2. Go to Settings → Servers → Add Server
3. Select "Add from running server"
4. The server should appear in the list - click "Install"

More details on this step can be found here: https://modelcontextprotocol.io/quickstart/server

Using in Claude

Once connected, Claude can:
- Access Azure AD data via resources (e.g., roadrecon://users)
- Run security analysis with tools (e.g., find_privileged_users)
- Use pre-built prompts for common security tasks

Example Queries

- "Analyze the MFA status of users in this Azure AD tenant"
- "Find all users with privileged roles"
- "Check for applications with secrets or certificates"
- "Analyze the overall security posture of this Azure AD environment"

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

find_privileged_users()

analyze_mfa_status()

find_applications_with_secrets()

analyze_groups()

identify_stale_accounts()

analyze_pim_implementation()

analyze_service_principal_credentials()

analyze_legacy_authentication()

analyze_conditional_access_policies(file_path: str = '')

Claude Desktop / Cursor

Linux

Macos

Windows

ROADrecon MCP Server

Features

Prerequisites

Installation

Usage

Running the server

Connecting with Claude Desktop

Using in Claude

Example Queries

Install

More like this

Sentry

Github

Git

GitLab

Context 7

1Panel

`find_privileged_users()`

`analyze_mfa_status()`

`find_applications_with_secrets()`

`analyze_groups()`

`identify_stale_accounts()`

`analyze_pim_implementation()`

`analyze_service_principal_credentials()`

`analyze_legacy_authentication()`

`analyze_conditional_access_policies(file_path: str = '')`