MCP server for Sliver C2 — AI agent automation for post-exploitation
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"sliver-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# sliver-mcp · [English](#english) / [中文](#中文) --- ## English MCP server for [Sliver C2](https://github.com/BishopFox/sliver) — let AI agents automate post-exploitation. **V1.0 — 17 tools** for session interaction, command execution, file operations, and reconnaissance. ### Prerequisites - Python >= 3.10 - [uv](https://docs.astral.sh/uv/) (Python package manager) - [sliver-py](https://github.com/hi-unc1e/sliver-py) (gRPC bindings) - A running [Sliver C2 server](https://github.com/BishopFox/sliver) - A Sliver operator config file (generated by `sliver-client import` or `sliver-server operator`) ### Quick Start ```bash # Clone both repos git clone git@github.com:hi-unc1e/sliver-mcp.git cd sliver-mcp git clone git@github.com:hi-unc1e/sliver-py.git # Install & run uv sync uv run sliver-mcp --config /path/to/operator.cfg ``` ### Configuration | Option | CLI | Default | |--------|-----|---------| | Operator config | `--config PATH` | (required) | | Downloads dir | `--downloads-dir DIR` | `~/Downloads/sliver/` | | gRPC timeout | `--timeout SECONDS` | `60` | | Debug logging | `--debug` | off | ### Claude Desktop Setup ```json { "mcpServers": { "sliver": { "command": "uv", "args": [ "run", "--directory", "/path/to/sliver-mcp", "sliver-mcp", "--config", "/path/to/operator.cfg" ] } } } ``` ### Tools | Category | Tool | Description | |----------|------|-------------| | Server | `server_version` | Get Sliver server version | | Sessions | `list_sessions` | List all active sessions | | | `session_info` | Get detailed session info | | | `kill_session` | Kill a session | | Execute | `execute` | Run shell command (`auto`/`cmd`/`powershell`/`sh`) | | Files | `list_files` | List directory contents | | | `change_directory` | Change working directory | | | `working_directory` | Get current directory | | | `make_directory` | Create directory | | | `remove_path` | Remove file/directory | | | `download_file` | Dow…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.