Back to MCP Trust Indexm8ven
52
/ 100
1 month ago
pulsemcp

Hercules

Penetration testing tools via containerized Kali Linux for Claude.

→ 0xmihirk/hercules-mcp· listed on pulsemcp
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

PulseMCPGlama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Tool descriptions don’t match what handlers do
1 tool describes read intent but its handler mutates — system_network_info (line 226: raw = subprocess.check_output("ipconfig", text=True, timeout=5))
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: MSF_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretMSF_PASSWORD— hercules Password used by msfrpcd and the Metasploit RPC client.
configSKIP_METASPLOIT— Metasploit enabled, default =false 45
configPRESERVE_CONTAINER— false Keep the Docker container after MCP shutdown for debugging.
configUSE_PRIVILEGED— false Use Docker --privileged instead of minimal network capabilities.
configTOOL_INSTALL_MODE— minimal Tool install mode value passed through configuration.
configMAX_CONCURRENT_HEAVY— 3 Semaphore limit for heavy operations.
configMAX_CONCURRENT_LIGHT— 10 Semaphore limit for light operations.
configALLOWED_TARGETS— empty Comma-separated allow-list. Empty means no allow-list restriction.
configBLOCKED_TARGETS— empty Comma-separated block-list. Block rules take priority.
configHERCULES_DISABLED_TOOLS— empty Comma-separated MCP tools to not register (managed by the setup UI). Trims their schema from the agent's context; the binary stays usable via shell_exec. Core tools cannot be disabled.
configCONTAINER_CPU_LIMIT— 0 Docker CPU limit. 0 means unlimited.
configCONTAINER_MEM_LIMIT— 0 Docker memory limit. 0 means unlimited.
configDEFAULT_TIMEOUT— 300 Default command timeout in seconds.
configMAX_EXEC_TIMEOUT
configWATCHDOG_INTERVAL— 20 Seconds between container health checks; 0 disables the watchdog.
configBROWSER_HEADLESS— true Run the stealth browser headless, or headed under Xvfb when false.
configBROWSER_STREAM_PORT— 0 Forward a headed live-view port to the host (0 = off, headed mode only).
configBROWSER_PROXY— empty Default upstream proxy for browser sessions.
configBROWSER_TIMEZONE
configBROWSER_LOCALE
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/0xmihirk-hercules-mcp-1bihql)](https://m8ven.ai/mcp/0xmihirk-hercules-mcp-1bihql)
commit: f70364cca892a8466ccf603d3df2cec4a5aacdeb
code hash: a7ea3290439682ffb9ccbcfa4677c2b118a15b209a6d21d7dd87450d4fbaa590
verified: 6/16/2026, 1:10:14 PM
view raw JSON →