Back to Home
erickemj icon

BloodHound-MCP

by erickemj

Overview

An AI assistant integrated with an MCP Server to query and analyze Active Directory (AD) and Azure Active Directory (AAD) environments using a Neo4j database populated with BloodHound data.

Installation

Run Command
python server.py

Environment Variables

  • BLOODHOUND_URI
  • BLOODHOUND_USERNAME
  • BLOODHOUND_PASSWORD

Security Notes

Critical Cypher injection vulnerability due to direct string formatting of user/AI-generated input into database queries in most of the predefined tools, rather than using parameterized queries. This allows for arbitrary database manipulation if an attacker can control input. Default Neo4j credentials ('neo4j'/'bloodhound') are used if environment variables are not set, which are weak defaults but common for local testing setups.

Similar Servers

Stats

Interest Score37
Security Score3
Cost ClassHigh
Avg Tokens3500
Stars9
Forks0
Last Update2025-12-15

Tags

BloodHoundActive DirectoryAzure ADNeo4jSecurity AnalysisAI Assistant