MCP CyberAgent

Example Use Cases

• 1

  Scan running startup applications and processes for malware by extracting SHA256 hashes via PowerShell and querying VirusTotal.

• 2

  Perform active network reconnaissance and port/service discovery using Nmap and basic reachability checks (ping).

• 3

  Enrich IP intelligence with Shodan lookups and retrieve public IP/connectivity information.

Description

MCP-CyberAgent is an MCP server/bridge that enables Claude (or other MCP clients) to execute local cybersecurity tasks by integrating with VirusTotal, Nmap, Shodan and Windows PowerShell. It can extract SHA256 hashes from startup applications, check them against VirusTotal, perform port and service scans with Nmap, query Shodan for internet-facing intelligence, and run basic connectivity checks (ping, public IP). The project runs locally, requires API keys for VirusTotal and Shodan, and is presented as a free, personal/community tool to automate threat intelligence and network troubleshooting workflows.