SuperAPI AI Directory
Partner with us中文AI newsFavorites
All toolsAI developer platformsroadrecon_mcp_server

roadrecon_mcp_server

Analyze ROADrecon gather results from Azure tenant enumeration.

Open website

About this tool

Purpose

ROADrecon MCP Server is an MCP (Model Context Protocol)-based server designed to enable AI assistants such as Claude to access Azure AD data collected by ROADRecon and perform security analysis on it. It leverages ROADRecon data from the ROADtools suite to provide AI with a structured view of the Azure AD environment.

Main Capabilities

This server provides capabilities in three ways:

Resources

Readable Azure AD data types include:

  • roadrecon://stats - Summary statistics
  • roadrecon://users - All users
  • roadrecon://users/{id} - User details
  • roadrecon://groups - All groups
  • roadrecon://groups/{id} - Group details
  • roadrecon://applications - All applications
  • roadrecon://applications/{id} - Application details
  • roadrecon://serviceprincipals - All service principals
  • roadrecon://serviceprincipals/{id} - Service principal details
  • roadrecon://devices - All devices
  • roadrecon://mfa - MFA status of all users
  • roadrecon://directoryroles - All directory roles
  • roadrecon://roledefinitions - All role definitions
  • roadrecon://approles - All app role assignments
  • roadrecon://oauth2permissions - All OAuth2 permission grants
  • roadrecon://tenantdetails - Tenant details

Tools

Executable security analysis operations include:

  • find_privileged_users() - Find users with high-privilege roles
  • analyze_mfa_status() - Analyze user MFA deployment
  • find_applications_with_secrets() - Find applications with keys or certificates
  • analyze_groups() - Analyze group types and memberships
  • identify_stale_accounts() - Find accounts that have not signed in or changed passwords within a specified period
  • analyze_pim_implementation() - Assess Privileged Identity Management implementation
  • analyze_service_principal_credentials() - Find over-privileged service principals with long-lived credentials
  • analyze_legacy_authentication() - Identify legacy authentication protocol risks that can bypass MFA
  • analyze_conditional_access_policies(file_path: str = "") - Analyze conditional access policies from HTML files; by default looks for C:\Temp\caps.html, and if not found, prompts the user to specify a file path

Prompts

Built-in security analysis templates include:

  • analyze_security_posture - Comprehensive security analysis
  • analyze_privileged_access - Privileged access model analysis
  • investigate_application_risks - Application security risk assessment
  • analyze_identity_security - Identity security configuration analysis
  • analyze_stale_accounts - Inactive user account analysis
  • analyze_privileged_access_management - PIM implementation assessment
  • analyze_service_principal_security - Service principal credential risk analysis
  • analyze_legacy_authentication_risks - Legacy authentication protocol risk assessment
  • analyze_conditional_access - Conditional access policy analysis and recommendations
  • comprehensive_security_review - Perform a complete security review of the entire environment

Usage

Prerequisites:

  • A running ROADRecon instance whose Web GUI is accessible
  • An MCP-compatible client (such as Claude Desktop)

Installation and running:

  1. Clone the repository
  2. Install dependencies:
pip install -r requirements.txt
  1. Ensure the ROADRecon GUI is running (default address:http://localhost:5000）
  2. Run the MCP server:
python roadrecon_mcp_server.py

To specify a different ROADRecon URL:

ROADRECON_URL=http://localhost:8080 python roadrecon_mcp_server.py

Connect Claude Desktop:

  1. Open Claude Desktop
  2. Go to Settings → Servers → Add Server
  3. Select "Add from running server"
  4. The server should appear in the list; click "Install"

For more details, refer to:https://modelcontextprotocol.io/quickstart/server

Once connected, Claude can:

  • Access Azure AD data via resources (such as roadrecon://users)
  • Perform security analysis via tools (such as find_privileged_users)
  • Use preset prompts to handle common security tasks

Example queries:

  • "Analyze the MFA status of users in this Azure AD tenant"
  • "Find all users with privileged roles"
  • "Check for applications with secrets or certificates"
  • "Analyze the overall security posture of this Azure AD environment"

Use cases

  • Conduct security audits and posture assessments of Azure AD tenants
  • Identify highly privileged users, MFA deployment gaps, and applications with secrets
  • Assess risks such as PIM, service principal credentials, legacy authentication, and conditional access policies
  • Query and summarize ROADRecon data in natural language via an AI assistant

Limitations

  • Must rely on a running ROADRecon instance and its Web GUI
  • Requires an MCP-compatible client (such as Claude Desktop) to use
  • Conditional access policy analysis requires providing an HTML file, with the default path being C:\Temp\caps.html
  • No further information is provided regarding fees, pricing, platform support scope, etc.

Related tools

Browse category