BloodHound MCP

Example Use Cases

• 1

  Answer natural-language questions about AD/AAD attack paths and relationships using BloodHound graph data.

• 2

  Convert high-level investigative prompts into Cypher queries and return summarized findings from a Neo4j-backed BloodHound dataset.

• 3

  Integrate AD/AAD analysis into automation or chat workflows by calling an MCP server configured with BloodHound credentials.

Description

BloodHound MCP is an extension that exposes BloodHound data via the MCP (Model Context Protocol), enabling Large Language Models to interpret and execute natural language queries against AD/AAD graphs stored in Neo4j. It translates conversational requests into queries (e.g., Cypher) and returns actionable insights about attack paths, permissions, and relationships. The project is configurable to point at a local or remote Neo4j instance and is intended to simplify complex directory analysis for security analysts and automation agents.