BloodHound-MCP

by MorDavid

364 stars

444 downloads

Not rated

GitHub Website

About

(by MorDavid) - integration that connects BloodHound with AI through MCP, allowing security professionals to analyze Active Directory attack paths using natural language queries instead of Cypher.

Details

Author: MorDavid
GitHub stars: 364
Downloads: 444
Categories: Developer Tools, Community, Other, API

- Natural-language interface for querying BloodHound data
- Over 75 specialized tools based on original BloodHound CE Cypher queries
- Domain structure mapping and privilege escalation path analysis
- Kerberos security issue detection (Kerberoasting, AS-REP Roasting)
- Certificate services vulnerability identification
- NTLM relay attack vector discovery

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name BloodHound-MCP

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

From the repository

Clone the repository, install dependencies with pip install -r requirements.txt, then configure the MCP server by setting the BLOODHOUND_URI, BLOODHOUND_USERNAME, and BLOODHOUND_PASSWORD environment variables. Once configured, you can ask natural-language questions about your Active Directory environment through any MCP-compatible client.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "bloodhound-mcp": {
            "BloodHound-MCP": {
                "command": "python",
                "args": [
                    "<Your_Path>\\BloodHound-MCP.py"
                ],
                "env": {
                    "BLOODHOUND_URI": "bolt://localhost:7687",
                    "BLOODHOUND_USERNAME": "neo4j",
                    "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
                }
            }
        }
    }
}

McpServers

{
    "BloodHound-MCP": {
        "command": "python",
        "args": [
            "<Your_Path>\\BloodHound-MCP.py"
        ],
        "env": {
            "BLOODHOUND_URI": "bolt://localhost:7687",
            "BLOODHOUND_USERNAME": "neo4j",
            "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
        }
    }
}

# BloodHound-MCP ![BloodHound-MCP](/images/BloodHound-MCP-Banner.png) ## Model Context Protocol (MCP) Server for BloodHound BloodHound-MCP is a powerful integration that brings the capabilities of Model Context Procotol (MCP) Server to BloodHound, the industry-standard tool for Active Directory security analysis. This integration allows you to analyze BloodHound data using natural language, making complex Active Directory attack path analysis accessible to everyone. > 🥇 **First-Ever BloodHound AI Integration!** > This is the first integration that connects BloodHound with AI through MCP, [originally announced here](https://www.linkedin.com/posts/mor-david-cyber_bloodhound-ai-cybersec-activity-7310921541213470721-N390). ## 🔍 What is BloodHound-MCP? BloodHound-MCP combines the power of: - **BloodHound**: Industry-standard tool for visualizing and analyzing Active Directory attack paths - **Model Context Protocol (MCP)**: An open protocol for creating custom AI tools, compatible with various AI models - **Neo4j**: Graph database used by BloodHound to store AD relationship data With over 75 specialized tools based on the original BloodHound CE Cypher queries, BloodHound-MCP allows security professionals to: - Query BloodHound data using natural language - Discover complex attack paths in Active Directory environments - Assess Active Directory security posture more efficiently - Generate detailed security reports for stakeholders ## 📱 Community Join our Telegram channel for updates, tips, and discussion: - **Telegram**: [root_sec](https://t.me/root_sec) ## 🌟 Star History [![Star History Chart](https://api.star-history.com/svg?repos=MorDavid/BloodHound-MCP-AI&type=Date)](https://www.star-history.com/#MorDavid/BloodHound-MCP-AI&Date) ## ✨ Features - **Natural Language Interface**: Query BloodHound data using plain English - **Comprehensive Analysis Categories**: - Domain structure mapping - Privilege escalation paths - Kerberos security issues (Kerberoasting, AS-REP Roasting) - Certificate services vulnerabilities - Active Directory hygiene assessment - NTLM relay attack vectors - Delegation abuse opportunities - And much more! ## 📋 Prerequisites - BloodHound 4.x+ with data collected from an Active Directory environment - Neo4j database with BloodHound data loaded - Python 3.8 or higher - MCP Client ## 🔧 Installation 1. Clone this repository: ```bash git clone https://github.com/your-username/MCP-BloodHound.git cd MCP-BloodHound ``` 2. Install dependencies: ```bash pip install -r requirements.txt ``` 3. Configure the MCP Server ```bash "mcpServers": { "BloodHound-MCP": { "command": "python", "args": [ "<Your_Path>\\BloodHound-MCP.py" ], "env": { "BLOODHOUND_URI": "bolt://localhost:7687", "BLOODHOUND_USERNAME": "neo4j", "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition" } } } ``` ## 🚀 Usage Example queries you can ask through the MCP: - "Show me all paths from kerberoastable users to Domain Admins" - "Find computers where Domain Users have local admin rights" - "Identify Domain Controllers vulnerable to NTLM relay attacks" - "Map all Active Directory certificate services vulnerabilities" - "Generate a comprehensive security report for my domain" - "Find inactive privileged accounts" - "Show me attack paths to high-value targets" ## 🔐 Security Considerations This tool is designed for legitimate security assessment purposes. Always: - Obtain proper authorization before analyzing any Active Directory environment - Handle BloodHound data as sensitive information - Follow responsible disclosure practices for any vulnerabilities discovered ## 📜 License This project is licensed under the MIT License - see the LICENSE file for details. ## 🙏 Acknowledgments - The BloodHound team for creating an amazing Active Directory security tool - The security community for continuously advancing AD security practices [![Verified on MseeP](https://mseep.ai/badge.svg)](https://mseep.ai/app/09d13f50-8965-4ebf-b4bf-d6bb98e8f092) --- *Note: This is not an official Anthropic product. BloodHound-MCP is a community-driven integration between BloodHound and MCP.*

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

Claude Desktop / Cursor

McpServers

Install

More like this

Sequential Thinking

Sentry

Github

Filesystem

EverArt

Google Drive