Labsco
MCP SERVER

Nmap Scan Interface

by 0xPratikPatil

Nmap's scan types — including the stealthy ones — driven by description instead of flags.

Vulnerability Scanning & Application Security
Summary
The scan type is a decision about noise, and naming them makes that decision visible.

Nmap's difficulty was never the scanning, it was knowing that a version scan is loud, a list scan touches nothing, and an idle scan hides the origin. Presenting them as named options puts that choice in front of whoever is asking instead of buried in flags. Everything here still only belongs on systems you are authorised to scan — a friendlier interface changes the ergonomics, not the rules.

What it is

A wrapper over Nmap, exposing its scan modes as named operations so a scan is requested by intent rather than by remembering flag combinations.

What you get
  • Top-ports scanning for a quick view of the common entry points
  • DNS brute force for subdomain discovery
  • List scan — active hosts in a range, without touching their ports
  • OS detection and service version detection
  • FIN scan and idle scan, the stealthier modes
  • Ping scan for straightforward host discovery
Requirements

Nmap installed locally — this drives it rather than reimplementing it. MIT licensed.

Setup effort

One command — npx -y @smithery/cli install @0xPratikPatil/nmapmcp --client claude