nmap MCP server for AI-assisted network security auditing

Network scanning MCP server wrapping nmap. Provides 14 purpose-built tools for host discovery, port scanning (SYN/TCP/UDP), service & OS detection, NSE scrip...

This skill is coherent with its stated purpose (an nmap MCP wrapper) and includes sensible safeguards (CIDR allowlist, target validation, audit logging, injection guards). Before installing: 1) confirm you actually want an on-host nmap service (it will execute nmap subprocesses and write scan results/audit logs to disk); 2) review and tighten config.yaml allowed_cidrs to your precise scope — do not leave broad RFC1918 ranges enabled in shared environments; 3) understand the host change required: granting cap_net_raw to the nmap binary (setcap) is necessary for SYN/ARP/OS scans and should be applied only if you trust this code and the environment; 4) protect the scan and audit directories (they may contain sensitive host/service info); 5) note the metadata mismatch (registry says no required binaries / instruction-only while the code requires nmap and Python packages) — installation is manual. If you want stronger assurance, run the bundled tests locally (they exercise scope enforcement, logging, persistence, and injection guards) and audit server.py end-to-end for any remaining truncated functions before deploying on production hosts.

Type: OpenClaw Skill Name: nmap-mcp Version: 1.0.0 The nmap-mcp skill bundle is a robust and well-documented MCP server for network auditing. It features 14 specialized tools with built-in security controls, including CIDR scope enforcement, audit logging, and protection against shell injection and path traversal. While a minor vulnerability exists in the regex used to filter dangerous nmap flags in the custom scan tool (potentially allowing script paths if using an equals sign), the inclusion of a comprehensive test suite (tests/test_nmap_mcp.py) and clear focus on responsible security auditing indicate the bundle is benign and professionally developed.