Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 15 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -350,21 +350,30 @@ bbctl asset stats --domain evilcorp.com | jq

BBOT Server supports chat-based AI interaction via MCP (Model Context Protocol).

The SSE server listens at `http://localhost:8807/v1/mcp/`
The SSE server listens at `http://localhost:8807/v1/mcp/`.

`mcp.json` (cursor / vs code):
`mcp.json` (Cursor / VS Code):
```json
{
"mcpServers": {
"bbot": {
"url": "http://localhost:8807/v1/mcp/"
}
"mcpServers": {
"bbot": {
"url": "http://localhost:8807/v1/mcp/",
"headers": {
"x-api-key": "deadbeef-9b4d-4208-890c-4ce9ad3b4710"
}
}
}
}
```

After connecting your AI client to BBOT Server, you can ask it sensible questions like, "Use MCP to get all the bbot findings", "what are the top open ports?", "what else can you do with BBOT MCP?", etc.

**NOTE**: Authentication is [currently broken](https://github.com/blacklanternsecurity/bbot-server/issues/52) in Cursor, Cline, and it seems most other VS Code forks. A workaround is to disable authentication with `--no-authentication` when starting the server. Obviously, be careful with this and don't be a dumbass.

```bash
bbctl server start --no-authentication
```

## As a Python Library

You can interact fully with BBOT Server as a Python library. It supports either local or remote connections, and the interface to both is identical:
Expand Down