Ludus

Ludus FastMCP enables AI-powered management of Ludus cyber ranges through natural language commands. The server exposes231 toolsacross 23 modules for range lifecycle management, scenario deployment, template creation, Ansible role management, and security monitoring integration.

Requires Ludus 2.0 or later.This release targets the Ludus 2.x API only, which is what makes blueprints, groups, content sources, VM console access, quotas and diagnostics available. Support for the Ludus 1.x API was removed; pin ludus-fastmcp to a 1.x release if you still run a Ludus 1.x server.

The client coversevery endpoint in the Ludus API, validated against a live Ludus 2.3.0 server.

Works with any MCP-compatible client including Claude Desktop, VS Code (Cline), OpenWebUI, and AnythingLLM.

- Python 3.11+
- FastMCP 3.x (installed automatically)
- A Ludus server running2.0 or later
- Ludus API key, or a JWT token for Pro/SSO deployments

# Using pipx (recommended) pipx install git+https://github.com/tjnull/Ludus-FastMCP # From source git clone https://github.com/tjnull/Ludus-FastMCP cd Ludus-FastMCP pip install -e .

The wizard configures API credentials, tests connectivity, and generates MCP client configuration files.

ludus-fastmcp --setup # Interactive setup wizard ludus-fastmcp --list-tools # List all 231 available tools ludus-fastmcp --version # Display version information ludus-fastmcp # Start MCP server ludus-fastmcp --daemon # Run as background service

ludus-ai setup-llm # Configure local LLM (Ollama) ludus-ai install anythingllm # Install AnythingLLM interface ludus-ai tool list-tools # List available tools ludus-ai tool call-tool <name> # Execute tools directly

Once connected to an MCP client, interact with your Ludus environment:

Show my current range status Deploy an Active Directory lab with Wazuh monitoring Create a snapshot named "pre-attack" for all VMs Build a lab with 2 domain controllers and 5 workstations Create a blueprint from my current range and share it with the red-team group Show system diagnostics and storage usage List all groups and their members

Examples of using Ludus-FastMCP with grok code through Opencode.

This release speaks the Ludus 2.x API only. Every request goes to/api/v2; there is no v1 code path left to fall back to.

On the first call the client asks the server for its version and refuses to continue if it does not answer as a 2.x server, so a mismatch surfaces once, up front, instead of as a puzzling 404 from whichever tool you happened to run:

https://ludus.example:8080 does not serve the Ludus 2.x API (GET /api/v2/ returned HTTP 404). This release requires Ludus 2.0 or later; upgrade the server, or pin ludus-fastmcp to a 1.x release for a Ludus 1.x server.

SetLUDUS_API_VERSION=v2to assert the version yourself and skip that check (it saves one request per session).LUDUS_API_VERSION=v1is rejected at startup rather than silently ignored.

pipx install "git+https://github.com/tjnull/Ludus-FastMCP@v1.0.0"

Upgrading the server is the better path: blueprints, content sources, groups, quotas, deployment log history and VM console access do not exist in the 1.x API at all.

Some Ludus capabilities ship as server plugins that may not be loaded on a given install. Quotas and auto-shutdown are the common examples. When a plugin is absent, the Ludus API answers with HTTP 404 even though the request was correct.

Rather than reporting that as a missing endpoint, those tools return a clear result so an AI assistant does not go hunting for a nonexistent bug:

{ "available": false, "feature": "Quotas", "error": "Quotas is not available on this Ludus server.", "reason": "This capability is provided by a Ludus plugin that is not loaded on the server.", "hint": "The request was well-formed. Do not retry or try alternative endpoints." }

Endpoints a server does not implement at all (HTTP 501, such as/range/sshconfigon some builds) are reported the same way, with an explicit note that retrying will not help.

This software is intended for authorized security testing, educational purposes, and research in controlled environments. Users are responsible for compliance with applicable laws and organizational policies. The authors make no warranties and assume no liability for use or misuse of this software.

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

Create crafted UI components inspired by the best 21st.dev design engineers.

Bring agent evaluations, observability, and synthetic test set generation directly into your IDE for free with Galileo's new MCP server

An MCP server to help AI assistants to answer questions and generate AccelByte Extend SDK code more effectively .

MCP server for AI Diagram Maker — generate beautiful software engineering diagrams directly inside Cursor, Claude Desktop, Claude Code, or any MCP-compatible AI agent

ALAPI MCP Tools,Call hundreds of API interfaces via MCP

AI-powered SVG animation generator that transforms static files into animated SVG components using the Allyson platform

MCP server that gives AI assistants on-demand access to 1,500+ amCharts docs, ~300 code examples, and 1000+ class API references.

APIMatic MCP Server is used to validate OpenAPI specifications using APIMatic. The server processes OpenAPI files and returns validation summaries by leveraging APIMatic’s API.

One shared context layer for AI agents and humans — live API specs, DB schemas, and versioned contracts across repos so every agent and teammate works from the same source of truth.