Server data from the Official MCP Registry
Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.
About
Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.
Security Report
This is a well-architected MCP server for a self-hosted penetration testing platform. Authentication is properly implemented with token-based or username/password credentials (never cached or hardcoded), credentials are validated at startup, and sensitive data is not logged. Input validation is present, errors don't leak credentials, and the codebase is clean with good test coverage. The server's permissions align appropriately with its purpose of connecting to a self-hosted Darkmoon Dashboard API. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 7 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: DARKMOON_BASE_URL
Environment variable: DARKMOON_USERNAME
Environment variable: DARKMOON_PASSWORD
Environment variable: DARKMOON_TOKEN
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-ascit31-darkmoon-mcp-server": {
"env": {
"DARKMOON_TOKEN": "your-darkmoon-token-here",
"DARKMOON_BASE_URL": "your-darkmoon-base-url-here",
"DARKMOON_PASSWORD": "your-darkmoon-password-here",
"DARKMOON_USERNAME": "your-darkmoon-username-here"
},
"args": [
"-y",
"@darkmoon_ai/mcp-server"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
@darkmoon_ai/mcp-server
A Model Context Protocol server that lets an MCP client (Claude Desktop, Goose, Continue, LibreChat, ...) drive Darkmoon, an open source (GPL-3.0) autonomous AI penetration testing platform.
Requires Darkmoon Pro
The Darkmoon engine and CLI are open source. This server talks to the Darkmoon Dashboard API, which is part of Darkmoon Pro and always self-hosted: there is no public hosted endpoint, so you supply the base URL of your own instance. It does not work against the open source CLI alone.
Tools
| Tool | Description |
|---|---|
run_pentest | Start an autonomous pentest against one authorized target and return the run_id |
get_run_status | Report running, completed, error or unknown for a run, from its run log |
list_campaigns | List campaigns visible to the dashboard user (read only) |
get_findings | Vulnerabilities and severity statistics for a campaign (read only) |
Only run assessments against systems you own or are explicitly authorized in writing to test. Findings can include false positives and must be reviewed by a qualified human.
Configuration
| Variable | Description |
|---|---|
DARKMOON_BASE_URL | Base URL of your Darkmoon Pro Dashboard API (required) |
DARKMOON_USERNAME, DARKMOON_PASSWORD | Dashboard credentials; a JWT is requested on each call and never cached |
DARKMOON_TOKEN | Alternative to username/password: a pre-issued JWT |
DARKMOON_TIMEOUT_MS | Optional per-request timeout, default 60000 |
Client configuration
Claude Desktop (claude_desktop_config.json), Continue and LibreChat use the same mcpServers shape:
{
"mcpServers": {
"darkmoon": {
"command": "npx",
"args": ["-y", "@darkmoon_ai/mcp-server"],
"env": {
"DARKMOON_BASE_URL": "https://darkmoon.example.internal",
"DARKMOON_USERNAME": "your-dashboard-user",
"DARKMOON_PASSWORD": "your-dashboard-password"
}
}
}
}
Goose (~/.config/goose/config.yaml):
extensions:
darkmoon:
type: stdio
enabled: true
name: darkmoon
cmd: npx
args: ["-y", "@darkmoon_ai/mcp-server"]
envs:
DARKMOON_BASE_URL: https://darkmoon.example.internal
DARKMOON_USERNAME: your-dashboard-user
DARKMOON_PASSWORD: your-dashboard-password
Continue (.continue/mcpServers/darkmoon.yaml):
name: Darkmoon
version: 0.1.0
schema: v1
mcpServers:
- name: darkmoon
command: npx
args: ["-y", "@darkmoon_ai/mcp-server"]
env:
DARKMOON_BASE_URL: https://darkmoon.example.internal
DARKMOON_USERNAME: your-dashboard-user
DARKMOON_PASSWORD: your-dashboard-password
Develop
npm install
npm run build
npm test # mocked Dashboard API, in-memory MCP client and a real stdio process
License
GPL-3.0-only, same as Darkmoon.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Lharries · Communication
Read, search, and send WhatsApp messages through your AI assistant