Back to Home
erickemj icon

BloodHound-MCP

Verified Safe

by erickemj

Overview

An AI assistant for querying and analyzing Active Directory (AD) and Azure Active Directory (AAD) environments using BloodHound data stored in a Neo4j database.

Installation

Run Command
./BloodHound-MCP

Environment Variables

  • BLOODHOUND_URI
  • BLOODHOUND_USERNAME
  • BLOODHOUND_PASSWORD

Security Notes

The server uses weak default Neo4j credentials ('neo4j', 'bloodhound') if environment variables (BLOODHOUND_URI, BLOODHOUND_USERNAME, BLOODHOUND_PASSWORD) are not explicitly set. These defaults pose a significant security risk in any non-development environment. The `run_query` function directly executes Cypher queries, which is inherent to its functionality but means that if the AI's input (e.g., via prompt injection) or the MCP server itself is compromised, arbitrary database queries could be executed. No `eval`, obfuscation, or other immediately malicious code patterns were found.

Similar Servers

Stats

Interest Score37
Security Score5
Cost ClassMedium
Avg Tokens750
Stars9
Forks0
Last Update2025-12-11

Tags

Active DirectoryAzure ADBloodHoundNeo4jSecurity Analysis