factionsecurityllc/faction-mcp

By factionsecurityllc

•Updated 5 months ago

MCP server for the Faction pentesting collaboration platform. https://www.factionsecurity.com

Image

Security

Machine learning & AI

667

Overview Tags

factionsecurityllc/faction-mcp repository overview

⁠Faction MCP Server

MCP server for the Faction⁠ penetration testing colaboration platform. Exposes assessments, vulnerabilities, retests, and audit logs to any MCP-compatible AI client.

⁠Configure your MCP client

Create a docker-compose.yml file or download it from here.

services:
  faction-mcp:
    image: factionsecurityllc/faction-mcp:latest
    pull_policy: always
    stdin_open: true
    environment:
      FACTION_API_KEY: ${FACTION_API_KEY}
      FACTION_BASE_URL: ${FACTION_BASE_URL}

Set your environment variables in a .env file

FACTION_API_KEY=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
FACTION_BASE_URL=https://faction.yourcompany.com

Add the following to your MCP client config (e.g. ~/.claude/settings.json for Claude Code, or claude_desktop_config.json for Claude Desktop):

Docker:

{
  "mcpServers": {
    "faction": {
      "command": "docker",
      "args": [
        "compose",
        "-f", "/absolute/path/to/faction-mcp/docker-compose.yml",
        "run", "--rm", "-T", "faction-mcp"
      ]
    }
  }
}

Podman:

{
  "mcpServers": {
    "faction": {
      "command": "podman-compose",
      "args": [
        "-f", "/absolute/path/to/faction-mcp/docker-compose.yml",
        "run", "--rm", "-T", "faction-mcp"
      ]
    }
  }
}

⁠Available Tools

⁠Assessments

Tool	Description
`get_assessment_queue`	Get all non-completed assessments assigned to the authenticated user
`get_assessment`	Get full details for a specific assessment by ID
`update_assessment`	Update assessment fields: notes, executive summary, distribution list, custom fields
`get_assessment_vulnerabilities`	Get full vulnerability data for an assessment (large response — includes HTML and screenshots)
`get_vulnerability_summary_data`	Get stripped vulnerability data optimized for generating executive summaries

⁠Vulnerabilities

Tool	Description
`get_vulnerabilities`	Get all vulnerabilities opened within a date range
`get_vulnerability`	Get a vulnerability by ID
`get_vulnerability_by_tracking`	Get a vulnerability by tracking ID (e.g. Jira ticket)
`set_vulnerability_tracking`	Assign a tracking ID to a vulnerability
`set_vulnerability_status`	Set remediation status (dev/prod closed dates)
`get_risk_levels`	Get configured risk level definitions
`get_categories`	Get all vulnerability categories
`get_category`	Get a specific category by ID
`create_category`	Create a new vulnerability category (manager role required)

⁠Vulnerability Templates

Tool	Description
`get_vulnerability_templates`	Get all default vulnerability templates
`search_vulnerability_templates`	Search templates by name (partial match)
`get_vulnerability_template`	Get a specific template by ID
`create_vulnerability_templates`	Create or update default vulnerability templates

⁠Retests / Verifications

Tool	Description
`get_verification_queue`	Get the retest queue assigned to the authenticated user
`get_all_verifications`	Get all verifications, optionally filtered by date range
`get_user_verifications`	Get verifications for a specific user
`complete_verification`	Mark a retest as passed or failed
`schedule_retest`	Schedule a retest for a vulnerability

⁠Audit Logs

Tool	Description
`get_audit_log`	Get the system audit log for a date range (admin role required)
`get_assessment_audit_log`	Get audit log entries for all assessments in a date range
`get_assessment_audit_log_by_id`	Get audit log entries for a specific assessment
`get_user_audit_log`	Get audit log entries for a specific user

⁠Links

Tag summary

Recent tags

Content type

Image

Digest

sha256:86a83035e…

Size

67.5 MB

Last updated

5 months ago

docker pull factionsecurityllc/faction-mcp