# Argus Mcp

> MCP server wrapper for Argus defensive self-OSINT scans in Claude Code and other MCP clients

- **Type:** MCP server
- **Install:** `agentstack add mcp-lachydotmcg-argus-mcp`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [lachydotmcg](https://agentstack.voostack.com/s/lachydotmcg)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [lachydotmcg](https://github.com/lachydotmcg)
- **Source:** https://github.com/lachydotmcg/argus-mcp

## Install

```sh
agentstack add mcp-lachydotmcg-argus-mcp
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# argus-mcp

Run [Argus](https://github.com/lachydotmcg/argus) from Claude Code and other MCP clients.

Argus is a defensive self-OSINT scanner. `argus-mcp` wraps it as a small [Model Context Protocol](https://modelcontextprotocol.io/) server, so an agent can answer requests like:

> scan this username with Argus

## Why?

Security and privacy work often happens inside an agent session now. Without MCP, you have to leave the conversation, run Argus manually, copy results back, and ask the model to interpret them.

With `argus-mcp`, Claude Code or any MCP client can call Argus directly:

- enumerate a username across Argus's curated platform list
- run a full defensive footprint scan with Gemini-grounded web intelligence
- generate the existing Argus HTML and JSON reports

This repo is intentionally separate from Argus. Argus does the scanning; this package is only the MCP bridge.

## Responsible Use

Argus is for checking your own digital footprint, or a target you are explicitly authorized to investigate. Do not use it to stalk, harass, surveil, or profile people without consent.

The scan tools require `authorized=true` so clients and users must make that intent explicit.

## Tools

| Tool | What it does |
| --- | --- |
| `enumerate_username` | Checks one username across Argus platforms and returns found profiles. |
| `run_full_scan` | Runs enumeration, optional username variants, Gemini grounding, optional Google Custom Search, optional HIBP, and a risk summary. |
| `generate_report` | Produces Argus's HTML and JSON report files from a scan result. |

## Quick Start

Install this MCP server and Argus into the same Python environment:

```bash
git clone https://github.com/lachydotmcg/argus-mcp.git
cd argus-mcp
python -m venv .venv
source .venv/bin/activate
pip install -e .
pip install "git+https://github.com/lachydotmcg/argus.git"
```

Windows PowerShell:

```powershell
git clone https://github.com/lachydotmcg/argus-mcp.git
cd argus-mcp
python -m venv .venv
.\.venv\Scripts\activate
pip install -e .
pip install "git+https://github.com/lachydotmcg/argus.git"
```

During local development, you can install Argus from a sibling checkout instead:

```powershell
pip install -e ..\argus
```

If you do not want to install Argus into the same environment, set `ARGUS_SOURCE_PATH` to the Argus source checkout.

## Claude Code

Copy-paste this after installing:

```bash
claude mcp add \
  --env GEMINI_API_KEY=your-gemini-key \
  --transport stdio \
  argus \
  -- /absolute/path/to/argus-mcp/.venv/bin/python -m argus_mcp.server
```

Windows PowerShell:

```powershell
claude mcp add `
  --env GEMINI_API_KEY=your-gemini-key `
  --transport stdio `
  argus `
  -- C:\absolute\path\to\argus-mcp\.venv\Scripts\python.exe -m argus_mcp.server
```

If Argus is not installed in the same environment, add `ARGUS_SOURCE_PATH`:

```bash
--env ARGUS_SOURCE_PATH=/absolute/path/to/argus
```

Then ask Claude Code:

```text
Use Argus to enumerate the username "example" across platforms. I am authorized to scan this username.
```

## API Keys

`enumerate_username` does not need an API key.

`run_full_scan` can use:

- `GEMINI_API_KEY` or `GOOGLE_API_KEY` for Gemini-grounded web intelligence
- `GOOGLE_CSE_KEY` and `GOOGLE_CSE_CX` for exact Google Custom Search dork execution
- `HIBP_API_KEY` for Have I Been Pwned breach checks

## Development

```bash
PYTHONPATH=src python -m unittest discover -s tests
python -m compileall src tests
```

The MCP SDK is pinned to stable `mcp` v1.x because the upstream Python SDK docs currently mark v2 as alpha.

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [lachydotmcg](https://github.com/lachydotmcg)
- **Source:** [lachydotmcg/argus-mcp](https://github.com/lachydotmcg/argus-mcp)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-lachydotmcg-argus-mcp
- Seller: https://agentstack.voostack.com/s/lachydotmcg
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.