Cobalt Strike MCP Server

Bridges large language models with the Cobalt Strike C2 framework, enabling AI assistants to control adversary simulation workflows through natural language.

→ Cobalt-Strike/cobaltstrike-mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: CS_API_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configMCP_OPERATOR_ID— export ="operator-name"

configLOG_LEVEL— export ="INFO" # DEBUG, INFO, WARNING, ERROR

configMCP_AUDIT_LOG_FILE— export ="logs/audit.log"

configCS_API_BASE_URL— export ="https://your-teamserver:50443"

configCS_API_SPEC_URL

configCS_API_LOGIN_PATH

configCS_API_USERNAME— export ="your_username"

🔐 secretCS_API_PASSWORD— export ="your_password"

configMCP_TRANSPORT— export ="http"

configMCP_LISTEN_HOST— export ="127.0.0.1"

configMCP_LISTEN_PATH

configMCP_SERVER_NAME— export ="Cobalt Strike MCP"

configMCP_SERVER_INSTRUCTIONS

configMCP_LOG_LEVEL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/cobalt-strike-cobaltstrike-mcp-server-4cedpe)](https://m8ven.ai/mcp/cobalt-strike-cobaltstrike-mcp-server-4cedpe)

commit: 943033c5c068ac3b68a903e31e78860bf3924789

code hash: c2e56cfe1528c602b3dabf5c5a2a2a901988580a1addbdfc4544366895a6f327

verified: 6/16/2026, 1:19:47 PM

view raw JSON →