MCP REGISTRY FOR AGENTS DOCS PRICING CONTROL YOUR AGENTS

// MCP SERVER RECORD

Cobalt Strike MCP Server

Unverified

REPOmickeydb/cobalt-strike-mcp

FRisk gradecritical blast radius

Catalogue entry updated 22 days ago

Auth postureNot probedno remote endpoint probed yet

Tools22019 Destructive · 113 Execute · 14 Write · 74 Read

Worst categoryDestructivegrade tracks the peak, not the average

Capability mix

Destructive 19Execute 113Write 14Read 74

What it can reach

Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money

Tools 220

beacon_delete_fileDestructiveCritical clear_beacon_command_queueDestructiveHigh delete_credentialDestructiveCritical delete_listenerDestructiveCritical delete_listener_dnsDestructiveHigh

View all 220 tools

delete_listener_externalC2DestructiveHigh delete_listener_foreignHttpDestructiveCritical delete_listener_foreignHttpsDestructiveCritical delete_listener_httpDestructiveHigh delete_listener_httpsDestructiveCritical delete_listener_smbDestructiveCritical delete_listener_tcpDestructiveHigh delete_listener_userDefinedC2DestructiveCritical execute_kerberos_ticket_purgeDestructiveCritical execute_socks_stop_allDestructiveHigh execute_tokenStore_removeDestructiveHigh execute_tokenStore_removeAllDestructiveHigh kill_beaconDestructiveCritical reset_dataDestructiveCritical beacon_change_directoryExecuteHigh beacon_copy_fileExecuteHigh create_listenerExecuteHigh create_listener_dnsExecuteHigh create_listener_externalC2ExecuteCritical create_listener_foreignHttpExecuteHigh create_listener_foreignHttpsExecuteHigh create_listener_httpExecuteHigh create_listener_httpsExecuteHigh create_listener_smbExecuteHigh create_listener_tcpExecuteHigh create_listener_userDefinedC2ExecuteCritical elevate_beaconExecuteCritical elevate_commandExecuteCritical execute_beacon_commandExecuteCritical execute_bofExecuteCritical execute_bof_packExecuteCritical execute_bof_packedExecuteCritical execute_browserpivot_stopExecuteHigh execute_cancel_file_downloadExecuteHigh execute_checkinExecuteCritical execute_exitExecuteHigh execute_get_systemExecuteCritical execute_get_uidExecuteHigh execute_job_stopExecuteHigh execute_kerberos_ticket_useExecuteCritical execute_kill_processExecuteCritical execute_link_smbExecuteCritical execute_link_tcpExecuteCritical execute_make_tokenExecuteCritical execute_make_token_upnExecuteCritical execute_net_domainExecuteHigh execute_powershell_importExecuteCritical execute_rev2selfExecuteHigh execute_rportfwd_startExecuteCritical execute_rportfwd_stopExecuteHigh execute_setenvExecuteHigh execute_socks_stopExecuteHigh execute_socks_stop_portExecuteHigh execute_socks4_startExecuteCritical execute_socks5_startExecuteCritical execute_steal_tokenExecuteCritical execute_timestompExecuteHigh execute_tokenStore_stealExecuteCritical execute_tokenStore_stealAndUseExecuteCritical execute_tokenStore_useExecuteCritical execute_unlinkExecuteHigh generate_stageless_payloadExecuteCritical generate_stager_payloadExecuteCritical inject_beaconExecuteCritical inject_browserpivotStartExecuteCritical inject_dllExecuteCritical inject_hashdumpExecuteCritical inject_keyloggerExecuteCritical inject_loadDllExecuteCritical inject_mimikatzExecuteCritical inject_net_viewExecuteHigh inject_portscanExecuteHigh inject_postExDllExecuteCritical inject_powershell_unmanagedExecuteCritical inject_printscreenExecuteHigh inject_pthExecuteCritical inject_screenshotExecuteHigh inject_screenwatchExecuteCritical inject_shellcodeExecuteCritical inject_sshExecuteCritical inject_sshKeyExecuteCritical remoteExec_beaconExecuteCritical remoteExec_commandExecuteCritical set_beacon_beacon_gateExecuteHigh set_beacon_block_dllsExecuteHigh set_beacon_c2_host_holdExecuteHigh set_beacon_c2_host_releaseExecuteHigh set_beacon_dns_modeExecuteHigh set_beacon_ppidExecuteHigh set_beacon_sleepExecuteHigh set_beacon_spawntoExecuteHigh set_beacon_spoofed_argumentsExecuteHigh set_beacon_syscall_methodExecuteHigh spawn_beaconExecuteCritical spawn_beacon_asUserExecuteCritical spawn_beacon_underExecuteCritical spawn_chromedumpExecuteCritical spawn_commandExecuteCritical spawn_command_runAsExecuteCritical spawn_command_runNoOutputExecuteCritical spawn_command_runUnderExecuteCritical spawn_dcsyncExecuteCritical spawn_dotnetAssemblyExecuteCritical spawn_hashdumpExecuteCritical spawn_keyloggerExecuteCritical spawn_mimikatzExecuteCritical spawn_net_computersExecuteHigh spawn_net_domainTrustsExecuteHigh spawn_net_groupExecuteHigh spawn_net_sessionsExecuteHigh spawn_net_shareExecuteHigh spawn_net_timeExecuteHigh spawn_net_userExecuteHigh spawn_net_user_detailExecuteHigh spawn_net_viewExecuteHigh spawn_portscanExecuteHigh spawn_postExDllExecuteCritical spawn_powershellExecuteCritical spawn_powershell_unmanagedExecuteCritical spawn_printscreenExecuteCritical spawn_pthExecuteCritical spawn_screenshotExecuteHigh spawn_screenwatchExecuteCritical spawn_shellExecuteCritical spawn_shellcodeExecuteCritical spawn_sshExecuteCritical spawn_sshKeyExecuteCritical beacon_create_directoryWriteHigh beacon_move_fileWriteMedium beacon_upload_fileWriteHigh create_credentialWriteCritical note_beaconWriteMedium set_beacon_c2_failover_notificationWriteHigh set_beacon_c2_hostWriteHigh set_beacon_c2_host_resetWriteHigh set_killdateWriteHigh set_teamserver_ipWriteHigh update_listener_dnsWriteHigh update_listener_httpWriteHigh update_listener_httpsWriteHigh update_profileWriteHigh beacon_download_fileReadHigh beacon_get_current_directoryReadHigh beacon_list_directoryReadHigh beacon_list_drivesReadHigh download_payloadReadHigh execute_beacon_infoReadHigh execute_clipboardReadMedium execute_get_privsReadMedium execute_reg_queryReadHigh execute_reg_queryvReadHigh get_artifactsReadMedium get_beaconReadHigh get_beacon_active_downloadsReadHigh get_beacon_c2_host_profilesReadHigh get_beacon_command_helpReadMedium get_beacon_helpReadLow get_beacon_jobsReadMedium get_beacon_keystrokesReadHigh get_beacon_outputReadHigh get_beacon_taskReadHigh get_beacon_tasks_detailReadHigh get_beacon_tasks_summaryReadHigh get_beacon_tokenStoreReadHigh get_credentialReadHigh get_downloadReadHigh get_keystrokesReadHigh get_killdateReadHigh get_listenerReadHigh get_listener_dnsReadHigh get_listener_externalC2ReadHigh get_listener_foreignHttpReadHigh get_listener_foreignHttpsReadHigh get_listener_httpReadHigh get_listener_httpsReadHigh get_listener_smbReadHigh get_listener_tcpReadHigh get_listener_userDefinedC2ReadHigh get_profileReadHigh get_screenshotReadHigh get_system_informationReadHigh get_taskReadHigh get_task_errorReadHigh get_task_logReadHigh get_teamserver_infoReadMedium get_teamserver_ipReadHigh inject_chromedumpReadHigh inject_dcsyncReadLow inject_logonPasswordsReadLow inject_net_computersReadHigh inject_net_dclistReadHigh inject_net_domain_controllersReadMedium inject_net_domainTrustsReadHigh inject_net_groupsReadHigh inject_net_localGroupReadMedium inject_net_logonsReadMedium inject_net_sessionsReadHigh inject_net_sharesReadHigh inject_net_timeReadLow inject_net_user_detailReadHigh inject_net_usersReadMedium list_beaconsReadHigh list_credentialsReadHigh list_downloadsReadHigh list_keystrokesReadHigh list_listenersReadHigh list_screenshotsReadHigh list_tasksReadHigh spawn_logon_passwordsReadCritical spawn_net_dclistReadHigh spawn_net_domainControllersReadHigh spawn_net_localGroupReadHigh spawn_net_logonsReadHigh spawn_process_listReadHigh test_connectionReadLow

Change history

No change history on record for this server.

Recommended policy

beacon_delete_filedeny

beacon_change_directoryrequire approval

beacon_create_directoryrate limit

Read-only toolsallow

Full policy breakdown with enforcement rules →

This record as markdown: /tools/mickeydb-cobalt-strike-mcp.md — append .md to any tool or server page.

// LOOK UP ANOTHER SERVER

Every MCP server has a record like this.

Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.

Teams ship this data inside their own products. See what a licence covers →