home / mcp / beagle security mcp server
MCP server to manage Beagle Security projects, applications, and automated security testing via MCP clients.
Configuration
View docs{
"mcpServers": {
"beaglesecurity-beagle-security-mcp-server": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"--env",
"BEAGLE_SECURITY_API_TOKEN=your_api_token_here",
"--env",
"NODE_ENV=production",
"mcp/beagle-security-mcp-server"
],
"env": {
"BEAGLE_SECURITY_API_TOKEN": "your_api_token_here"
}
}
}
}You use this MCP server to connect your MCP client to the Beagle Security platform, enabling project, application, domain verification, and automated security testing management through a single integration point. It streamlines how you create and manage security tests, track results, and work with team projects.
You interact with the MCP server through your MCP client by configuring it to point at one or more local or remote MCP endpoints. Use the HTTP-based or stdio-based configurations shown here to connect your client to the server. Once connected, you can create and manage projects, add applications to those projects, verify domains for security testing, and start automated penetration tests. You can monitor test progress, stop tests when needed, and retrieve detailed results in JSON format. You can also list and manage test sessions, track running tests, and filter by team if you work with a shared workspace.
Prerequisites you need on your system include Node.js and npm for local usage, and Docker if you prefer the containerized option. Ensure Docker is installed and running if you plan to use Docker-based deployment.
Option 1: Docker (Recommended) to run the MCP server:
Clone this project (or obtain the codebase in your preferred way)
Set up your environment variables and start the server with Docker.
Build and run with Docker:
npm run docker:build
npm run docker:runOr use Docker Compose to start the service in the background.
docker-compose up -dCreate a new project within Beagle Security MCP. You supply project details and it returns a project identifier.
Modify properties of an existing project, such as its name or description.
List all projects and their associated applications under your account.
Delete a project and its related resources.
Create a new application within a specific project, providing application details and configuration.
Retrieve detailed information for an application by its token.
Update properties of an existing application.
List all applications under a given project.
Delete an application and its associated data.
Obtain a domain verification signature required for ownership verification.
Complete domain verification using FILE, DNS, or API signature types.
Start an automated penetration test for an application or project.
Check the current status of a running test.
Stop a running test before completion if needed.
Retrieve detailed test results in JSON format.
List all test sessions for a given application.
List all currently running tests, with optional team filtering.