Skip to content

NodeZero® MCP Server

The NodeZero® MCP (Model Context Protocol) Server acts as a natural language bridge between your LLMs and the NodeZero API, enabling AI agents to directly integrate real-world pentesting capabilities into agentic workflows. By securely exposing NodeZero’s operations to LLMs, the MCP Server empowers your AI to: understand offensive security context, prioritize risk based on exploit-driven data unique to your organization, and execute pentesting operation types (op types) as part of autonomous Find, Fix, Verify (FFV) cycles.

NodeZero MCP Server - Beta release

This version of the NodeZero MCP Server only supports a locally hosted MCP server for use with your own IDE/AI Client & your own LLM models. The next release will offer a Horizon3.ai Hosted MCP Server featuring:

- OAuth-based authentication
- Multi-user mode support
- Simplified, automated deployment
- Streamable HTTP as the default transport protocol

When to use

  • You want your LLM or AI agent to query the NodeZero API in natural language for asset, vulnerability, and exposure context.
  • You need organization-specific exploit-driven prioritization in AI-driven remediation or incident response workflows.
  • You want to launch and manage pentests (op types) directly from your LLM without using the NodeZero Portal.
  • You need to feed offensive security intelligence into agentic workflows for rapid verification and risk reduction.
  • You want to simulate attacker behavior for exposure mapping, attack path visualization, or “what-if” security exercises while understanding risk in layman's terms.
  • You need to enable LLM-powered security orchestration that automates portions of Find, Fix, Verify (FFV) with real exploit data.

Next Steps

To get started with NodeZero MCP Server choose from the options below:

monitor Deploy MCP Server with IDE chevron_right
Recommended
Step-by-step instructions to set up the NodeZero MCP Server
terminal Deploy MCP Server with SSE, HTTP or Manually chevron_right
Additional instructions for alternative deployment methods
network_check Troubleshooting & Additional Tips chevron_right
Helpful tips and troubleshooting steps for your local deployment
privacy_tip Best Practices and Security Considerations chevron_right
Additional information on best practices to exercise to minimize security risk