MCP

MCP (Model Context Protocol) Server

Overview

PowerView.py includes an MCP server that allows AI agents and LLM-based tools to interact with PowerView through a standardized tool interface using Streamable HTTP transport. This enables querying and enumerating Active Directory objects, domain trusts, GPOs, group memberships, security vulnerabilities, and most other PowerView functionality directly from AI-powered applications.

Installation

The MCP server is not bundled in the base install. Install the MCP dependencies separately:

pip3 install .[mcp]

Or from PyPI:

pip3 install powerview[mcp]

Starting the MCP Server

powerview domain.local/lowpriv:Password1234@10.10.10.10 --mcp

With optional parameters:

powerview domain.local/lowpriv:Password1234@10.10.10.10 --mcp --mcp-host 0.0.0.0 --mcp-port 8888 --mcp-path /powerview

Parameters

Parameter	Default	Description
--mcp	-	Enable the MCP server
--mcp-host	127.0.0.1	Host address to bind the MCP server
--mcp-port	8080	Port to listen on
--mcp-name	PowerView	Name of the MCP server instance
--mcp-path	/mcp	URL path for the MCP endpoint

What It Exposes

The MCP server exposes most PowerView functionality through a standardized tool interface, including:

• Querying and enumerating AD objects (users, computers, groups, OUs)
• Domain trust enumeration
• GPO enumeration and analysis
• Group membership resolution
• ADCS (certificate services) enumeration
• Security vulnerability identification
• Session, share, and service enumeration on remote computers

Client Configuration

Claude Desktop

Claude Desktop does not natively support Streamable HTTP transport. Use mcp-proxy to bridge the connection.

Install mcp-proxy:

uv tool install mcp-proxy

Or:

pipx install mcp-proxy

Configure Claude Desktop by editing %APPDATA%\Claude\claude_desktop_config.json (Windows) or ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

{
  "mcpServers": {
    "powerview": {
      "command": "mcp-proxy",
      "args": ["http://127.0.0.1:8080/mcp"]
    }
  }
}

Cursor

Add the MCP server URL directly in Cursor's MCP settings:

http://127.0.0.1:8080/mcp

Security Warning

When using the MCP server with AI services, be aware that Active Directory data queried through PowerView will be transmitted to the AI service provider. This may include sensitive information such as usernames, group memberships, computer names, GPO configurations, and security-related attributes. Evaluate the sensitivity of your environment before connecting AI agents to a live domain.