Rapid7 MCP
UnclaimedAn MCP (Model Context Protocol) server for Rapid7. Allows Claude and other LLMs to query vulnerabilities, assets, and alerts directly from Rapid7 APIs.
Set up this server
More in AI & ML
Browse the full directoryUnclaimed listing
Is this your MCP server?
This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.
Claim this serverSecurity profile
Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works
7 of 7 tools
Documented tools (7)
From project documentation. A server handshake does not verify each tool’s description or behavior.
get_loot
Credentials, hashes, and files extracted from compromised hosts
get_workspace
Details for a single workspace
InsightIDR
SIEM & Investigations
InsightVM
Vulnerability Management
list_msp_tasks
Background tasks — scan imports, report generation, bruteforce jobs
list_sessions
Active Meterpreter and shell sessions — host, exploit, platform, username
list_workspaces
All Metasploit Pro workspaces (pentest projects)
Tool change history
FAQ
Questions about Rapid7 MCP Server
- How do I connect Rapid7 MCP Server to Claude?
- The project does not publish a launch command that MCPVault could verify. Open the repository linked on this page for its install steps; the listing names Claude Desktop, Claude Code, Cursor as compatible clients.
- Is Rapid7 MCP Server free?
- The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
- What can Rapid7 MCP Server do?
- Rapid7 MCP Server documents 7 tools to the agent, including get_loot, get_workspace, InsightIDR. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.