Install
$ agentstack add mcp-lachydotmcg-argus-mcp ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
argus-mcp
Run Argus from Claude Code and other MCP clients.
Argus is a defensive self-OSINT scanner. argus-mcp wraps it as a small Model Context Protocol server, so an agent can answer requests like:
> scan this username with Argus
Why?
Security and privacy work often happens inside an agent session now. Without MCP, you have to leave the conversation, run Argus manually, copy results back, and ask the model to interpret them.
With argus-mcp, Claude Code or any MCP client can call Argus directly:
- enumerate a username across Argus's curated platform list
- run a full defensive footprint scan with Gemini-grounded web intelligence
- generate the existing Argus HTML and JSON reports
This repo is intentionally separate from Argus. Argus does the scanning; this package is only the MCP bridge.
Responsible Use
Argus is for checking your own digital footprint, or a target you are explicitly authorized to investigate. Do not use it to stalk, harass, surveil, or profile people without consent.
The scan tools require authorized=true so clients and users must make that intent explicit.
Tools
| Tool | What it does | | --- | --- | | enumerate_username | Checks one username across Argus platforms and returns found profiles. | | run_full_scan | Runs enumeration, optional username variants, Gemini grounding, optional Google Custom Search, optional HIBP, and a risk summary. | | generate_report | Produces Argus's HTML and JSON report files from a scan result. |
Quick Start
Install this MCP server and Argus into the same Python environment:
git clone https://github.com/lachydotmcg/argus-mcp.git
cd argus-mcp
python -m venv .venv
source .venv/bin/activate
pip install -e .
pip install "git+https://github.com/lachydotmcg/argus.git"
Windows PowerShell:
git clone https://github.com/lachydotmcg/argus-mcp.git
cd argus-mcp
python -m venv .venv
.\.venv\Scripts\activate
pip install -e .
pip install "git+https://github.com/lachydotmcg/argus.git"
During local development, you can install Argus from a sibling checkout instead:
pip install -e ..\argus
If you do not want to install Argus into the same environment, set ARGUS_SOURCE_PATH to the Argus source checkout.
Claude Code
Copy-paste this after installing:
claude mcp add \
--env GEMINI_API_KEY=your-gemini-key \
--transport stdio \
argus \
-- /absolute/path/to/argus-mcp/.venv/bin/python -m argus_mcp.server
Windows PowerShell:
claude mcp add `
--env GEMINI_API_KEY=your-gemini-key `
--transport stdio `
argus `
-- C:\absolute\path\to\argus-mcp\.venv\Scripts\python.exe -m argus_mcp.server
If Argus is not installed in the same environment, add ARGUS_SOURCE_PATH:
--env ARGUS_SOURCE_PATH=/absolute/path/to/argus
Then ask Claude Code:
Use Argus to enumerate the username "example" across platforms. I am authorized to scan this username.
API Keys
enumerate_username does not need an API key.
run_full_scan can use:
GEMINI_API_KEYorGOOGLE_API_KEYfor Gemini-grounded web intelligenceGOOGLE_CSE_KEYandGOOGLE_CSE_CXfor exact Google Custom Search dork executionHIBP_API_KEYfor Have I Been Pwned breach checks
Development
PYTHONPATH=src python -m unittest discover -s tests
python -m compileall src tests
The MCP SDK is pinned to stable mcp v1.x because the upstream Python SDK docs currently mark v2 as alpha.
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: lachydotmcg
- Source: lachydotmcg/argus-mcp
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.