Chatting with Your Attack Paths: An MCP for BloodHound
ID: a2219e38-1c2c-5a87-a92b-f362164030cf
STIX ID: report--a2219e38-1c2c-5a87-a92b-f362164030cf
Feed Name: SpecterOps Blog
A technical blog detailing the creation of a FastMCP-based MCP server that enables LLMs (e.g., Claude) to interact with BloodHound CE via its API, covering HMAC authentication, modular API clients (users, computers, groups, graph, Cypher), tool/resource design for reliable Cypher generation, and prompt engineering; it demonstrates how natural-language workflows can surface AD attack paths and security insights, notes data-sharing caveats with Claude Desktop, and outlines plans for local LLM support.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.