English Français العربية

Darkmoon

السجل الرسمي الإنتاجية

Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.

الشيفرة المصدرية التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

NPM package @darkmoon_ai/mcp-server
Claude Code 
claude mcp add darkmoon -e 'DARKMOON_BASE_URL=<DARKMOON_BASE_URL>' -e 'DARKMOON_USERNAME=<DARKMOON_USERNAME>' -e 'DARKMOON_PASSWORD=<your darkmoon_password>' -e 'DARKMOON_TOKEN=<your darkmoon_token>' -- npx -y @darkmoon_ai/mcp-server@0.1.0
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "darkmoon": {
            "command": "npx",
            "args": [
                "-y",
                "@darkmoon_ai/mcp-server@0.1.0"
            ],
            "env": {
                "DARKMOON_BASE_URL": "<DARKMOON_BASE_URL>",
                "DARKMOON_USERNAME": "<DARKMOON_USERNAME>",
                "DARKMOON_PASSWORD": "<your darkmoon_password>",
                "DARKMOON_TOKEN": "<your darkmoon_token>"
            }
        }
    }
}

متغيرات البيئة

  • DARKMOON_BASE_URL إلزامي Base URL of your self-hosted Darkmoon Pro Dashboard API
  • DARKMOON_USERNAME Dashboard user
  • DARKMOON_PASSWORD سري Dashboard password
  • DARKMOON_TOKEN سري Pre-issued JWT, alternative to username/password

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. @darkmoon_ai/mcp-server
  2. Requires Darkmoon Pro
  3. Tools
  4. Configuration
  5. Client configuration
  6. Develop
  7. License

@darkmoon_ai/mcp-server

A Model Context Protocol server that lets an MCP client (Claude Desktop, Goose, Continue, LibreChat, ...) drive Darkmoon, an open source (GPL-3.0) autonomous AI penetration testing platform.

Requires Darkmoon Pro

The Darkmoon engine and CLI are open source. This server talks to the Darkmoon Dashboard API, which is part of Darkmoon Pro and always self-hosted: there is no public hosted endpoint, so you supply the base URL of your own instance. It does not work against the open source CLI alone.

Tools

ToolDescription
run_pentestStart an autonomous pentest against one authorized target and return the run_id
get_run_statusReport running, completed, error or unknown for a run, from its run log
list_campaignsList campaigns visible to the dashboard user (read only)
get_findingsVulnerabilities and severity statistics for a campaign (read only)

Only run assessments against systems you own or are explicitly authorized in writing to test. Findings can include false positives and must be reviewed by a qualified human.

Configuration

VariableDescription
DARKMOON_BASE_URLBase URL of your Darkmoon Pro Dashboard API (required)
DARKMOON_USERNAME, DARKMOON_PASSWORDDashboard credentials; a JWT is requested on each call and never cached
DARKMOON_TOKENAlternative to username/password: a pre-issued JWT
DARKMOON_TIMEOUT_MSOptional per-request timeout, default 60000

Client configuration

Claude Desktop (claude_desktop_config.json), Continue and LibreChat use the same mcpServers shape:

{
  "mcpServers": {
    "darkmoon": {
      "command": "npx",
      "args": ["-y", "@darkmoon_ai/mcp-server"],
      "env": {
        "DARKMOON_BASE_URL": "https://darkmoon.example.internal",
        "DARKMOON_USERNAME": "your-dashboard-user",
        "DARKMOON_PASSWORD": "your-dashboard-password"
      }
    }
  }
}

Goose (~/.config/goose/config.yaml):

extensions:
  darkmoon:
    type: stdio
    enabled: true
    name: darkmoon
    cmd: npx
    args: ["-y", "@darkmoon_ai/mcp-server"]
    envs:
      DARKMOON_BASE_URL: https://darkmoon.example.internal
      DARKMOON_USERNAME: your-dashboard-user
      DARKMOON_PASSWORD: your-dashboard-password

Continue (.continue/mcpServers/darkmoon.yaml):

name: Darkmoon
version: 0.1.0
schema: v1
mcpServers:
  - name: darkmoon
    command: npx
    args: ["-y", "@darkmoon_ai/mcp-server"]
    env:
      DARKMOON_BASE_URL: https://darkmoon.example.internal
      DARKMOON_USERNAME: your-dashboard-user
      DARKMOON_PASSWORD: your-dashboard-password

Develop

npm install
npm run build
npm test      # mocked Dashboard API, in-memory MCP client and a real stdio process

License

GPL-3.0-only, same as Darkmoon.

الأسئلة الشائعة

ما هو Darkmoon؟

Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.

كيف أثبّت Darkmoon؟

يعمل على جهازك. في Claude Code: claude mcp add darkmoon -e 'DARKMOON_BASE_URL=<DARKMOON_BASE_URL>' -e 'DARKMOON_USERNAME=<DARKMOON_USERNAME>' -e 'DARKMOON_PASSWORD=<your darkmoon_password>' -e 'DARKMOON_TOKEN=<your darkmoon_token>' -- npx -y @darkmoon_ai/mcp-server@0.1.0. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج Darkmoon إلى مفتاح API؟

نعم. يتطلب DARKMOON_BASE_URL, DARKMOON_PASSWORD, DARKMOON_TOKEN، وتضبطها في إعداداته.

هل Darkmoon مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص GPL-3.0.

من يصون Darkmoon؟

ينشره ASCIT31. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.