Install
$ agentstack add mcp-marlinkcyber-spiderfoot-mcp ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
SpiderFoot MCP Server
A Model Context Protocol (MCP) server that provides SpiderFoot OSINT automation capabilities to AI assistants and other MCP clients.
Installation
pip install spiderfoot-mcp
Configuration
Set the following environment variables or create a .env file:
SPIDERFOOT_URL=http://localhost:5001
SPIDERFOOT_USERNAME=admin
SPIDERFOOT_PASSWORD=your_password
Usage
As MCP Server
Start the MCP server:
spiderfoot-mcp
The server will expose SpiderFoot functionality as MCP tools that can be used by AI assistants.
Available Tools
The MCP server provides the following tools:
start_scan: Start a new SpiderFoot scanget_scan_status: Get the current status of a scanlist_scans: List all scans on the serverstop_scan: Stop a running scandelete_scan: Delete a scan and its dataget_scan_results: Get results from a scanget_scan_summary: Get a summary of scan resultswait_for_scan_completion: Wait for a scan to completeexport_scan_results: Export scan results in various formatsget_available_modules: Get list of available SpiderFoot modulessearch_scan_results: Search across scan resultsget_scan_log: Get log entries for a scanget_active_scans_summary: Get summary of tracked scansping: Test connectivity to SpiderFoot server
MCP Client Configuration
To use this server with Claude Desktop or other MCP clients, add the following to your MCP configuration:
{
"mcpServers": {
"spiderfoot": {
"command": "spiderfoot-mcp",
"env": {
"SPIDERFOOT_URL": "http://localhost:5001",
"SPIDERFOOT_USERNAME": "admin",
"SPIDERFOOT_PASSWORD": "your_password"
}
}
}
}
Requirements
- Python 3.8+
- spiderfoot-client>=1.0.0
- fastmcp>=2.10.0
- python-dotenv>=1.0.0
- A running SpiderFoot instance
Dependencies
This package depends on the spiderfoot-client package, which provides the underlying SpiderFoot API client functionality.
License
MIT License
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: marlinkcyber
- Source: marlinkcyber/spiderfoot-mcp
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.