Audit Bridge

Audit Bridge MCP is a Model Context Protocol (MCP) server built with TypeScript for orchestrating and managing Windows system auditing tools. It supports various system checks, configuration adjustments, and security operations through a standardized tool interface.

Purpose

Audit Bridge MCP streamlines Windows system audits by exposing multiple tools and operations behind a unified MCP interface. It is designed for integration with MCP clients and automation workflows related to security, compliance, and administration.

Benefits

• Centralized Audit Management: Unified MCP server to orchestrate various Windows system auditing tools, reducing complexity and improving operational efficiency.
• Standardized Interface: All audit-related tools and commands exposed through a standardized Model Context Protocol interface, making integration with MCP clients straightforward.
• Modular and Extensible: Modular file structure enables easy maintenance and future expansion with additional tools or features.
• Remote Automation: Supports remote audit operations via SSH, allowing administrators to manage and audit multiple Windows systems from a single location.
• Security and Compliance: Facilitates security checks (firewall status, admin rights verification, registry audits) to help maintain compliance with organizational or regulatory requirements.
• Flexibility: Enables both automated and manual security checks, supporting various use cases from routine audits to incident response.
• Efficiency: Reduces manual effort and potential for human error by automating repetitive system checks and configuration verifications.

Requirements

• Python 3.8 or higher
• Required Python packages (installed via pip install -r requirements.txt):
  • paramiko (for SSH connections)
  • fastmcp (for MCP server implementation)
• Remote computer(s) must have SSH enabled
• The user account used for SSH must have administrative rights on the remote computer
• Windows operating system on target machines

File Structure

/
├── main.py                 # MCP server entry point
├── requirements.txt        # Python dependencies
├── README.md               # Project documentation
└── utilities/              # Core functionality modules
    ├── batFileContentHandler.py # content of all the bat files that needs to be imported
    └── manualGuidesHandler.py   # content of all the manual guides

Features

• Exposes multiple tools via the Model Context Protocol (MCP):
  • Symantec status checker
  • Manual security guides
  • Admin rights verification
  • Firewall control (enable/disable/status)
  • Registry key audit and modifications
  • Remote audit setup (e.g., via .bat files)

Limitation

• currently running commands through SSH

Installation

Clone the repository and install dependencies:

git clone https://github.com/Shangwee/PY-Audit-Bridge.git
cd PY-Audit-Bridge
pip install -r requirements.txt

Usage

Integrate with your MCP client by referencing the built server:

{
  "mcpServers": {
    "audit-bridge-mcp": {
      "command": "fastmcp run",
      "args": ["/path/to/PY-Audit-Bridge/main.py"]
    }
  }
}

Replace /path/to/PY-Audit-Bridge/main.py with the actual path to your built server.