BloodHound MCP

What it does

BloodHound MCP connects the industry-standard BloodHound Active Directory security analysis tool to AI via the Model Context Protocol. It allows security professionals to interact with Neo4j graph data using natural language, removing the need to write complex Cypher queries manually.

Tools

• Attack Path Analysis: Identify complex paths from low-privileged users to high-value targets like Domain Admins.
• Privilege Escalation: Discover how users can escalate privileges within the AD environment.
• Vulnerability Mapping: Identify computers vulnerable to NTLM relay attacks or Kerberos security issues (Kerberoasting, AS-REP Roasting).
• Hygiene Assessment: Evaluate the overall security posture and hygiene of the Active Directory.
• Report Generation: Generate detailed security summaries and reports based on the graph data.

Installation

Add the following to your claude_desktop_config.json:

{
  "mcpServers": {
    "BloodHound-MCP": {
      "command": "python",
      "args": ["<Your_Path>/BloodHound-MCP.py"],
      "env": {
        "BLOODHOUND_URI": "bolt://localhost:7687",
        "BLOODHOUND_USERNAME": "neo4j",
        "BLOODHOUND_PASSWORD": "bloodhoundcommunityedition"
      }
    }
  }
}

Supported hosts

• Claude Desktop