A Model Context Protocol (MCP) server for automating Ludus cyber range environments through AI assistants written in Python.
Ludus FastMCP enables AI-powered management of Ludus cyber ranges through natural language commands. The server exposes 190+ tools across 20 modules for range lifecycle management, scenario deployment, template creation, Ansible role management, and security monitoring integration.
Supports both Ludus v1 and v2 with automatic version detection. All existing v1 tools work unchanged, and v2 adds blueprints, groups, VM console, diagnostics, enhanced range management, and more.
| Category | Description |
|---|---|
| Range Management | Create, configure, deploy, and manage virtual lab environments |
| Blueprints | Save, share, and apply reusable range configurations (v2) |
| Groups | Organize users and ranges with group-based access control (v2) |
| Scenario Deployment | Pre-built scenarios for AD, red/blue/purple team, and malware analysis |
| Template Builder | Custom OS templates, skeleton configurations, and YAML generation |
| Role Management | Ansible Galaxy integration, custom roles, and subscription roles |
| SIEM Integration | Wazuh, Splunk, Elastic Stack, and Security Onion support |
| AI Configuration | Natural language to YAML configuration conversion |
| Diagnostics | System health, license info, and migration tools (v2) |
Works with any MCP-compatible client including Claude Desktop, VS Code (Cline), OpenWebUI, and AnythingLLM.
- Python 3.11+
- Access to a Ludus server instance (v1 or v2)
- Ludus API key or JWT token (for v2 Pro/SSO users)
# Using pipx (recommended)
pipx install git+https://github.com/tjnull/Ludus-FastMCP
# From source
git clone https://github.com/tjnull/Ludus-FastMCP
cd Ludus-FastMCP
pip install -e .Run the interactive setup wizard:
ludus-fastmcp --setupThe wizard configures API credentials, tests connectivity, and generates MCP client configuration files.
For manual configuration options, see the Configuration Guide.
ludus-fastmcp --setup # Interactive setup wizard
ludus-fastmcp --list-tools # List all 190+ available tools
ludus-fastmcp --version # Display version information
ludus-fastmcp # Start MCP server
ludus-fastmcp --daemon # Run as background serviceludus-ai setup-llm # Configure local LLM (Ollama)
ludus-ai install anythingllm # Install AnythingLLM interface
ludus-ai tool list-tools # List available tools
ludus-ai tool call-tool <name> # Execute tools directlyOnce connected to an MCP client, interact with your Ludus environment:
Show my current range status
Deploy an Active Directory lab with Wazuh monitoring
Create a snapshot named "pre-attack" for all VMs
Build a lab with 2 domain controllers and 5 workstations
Create a blueprint from my current range and share it with the red-team group
Show system diagnostics and storage usage
List all groups and their members
Examples of using Ludus-FastMCP with grok code through Opencode.
| Document | Description |
|---|---|
| Getting Started | Installation, setup, and first deployment |
| Configuration | Environment variables and MCP client setup |
| Tools Reference | Complete documentation for all 190+ tools |
| Scenarios | Pre-built deployment scenarios |
| Troubleshooting | Common issues and solutions |
| Safety | Safety features and best practices |
| Feature | Ludus v1 | Ludus v2 |
|---|---|---|
| Auto-detection | Automatic | Automatic |
| API Key auth | Yes | Yes |
| JWT auth (Pro/SSO) | No | Yes |
| Range management | Yes | Yes |
| Snapshots | Yes | Yes |
| Templates | Yes | Yes (+ subscription roles) |
| Blueprints | No | Yes |
| Groups | No | Yes |
| VM Console | No | Yes |
| Diagnostics | No | Yes |
| Multi-range access | No | Yes |
Version is auto-detected on first API call. Override with LUDUS_API_VERSION=v1 or LUDUS_API_VERSION=v2. v2-only tools return a clear error message when used against a v1 server.
| Resource | Link |
|---|---|
| Ludus Documentation | docs.ludus.cloud |
| Ludus API Reference | api-docs.ludus.cloud |
| Ludus GitHub | github.com/badsectorlabs/ludus |
| FastMCP Framework | gofastmcp.com |
| MCP Specification | modelcontextprotocol.io |
- GitHub Issues - Bug reports and feature requests
- GitHub Discussions - Questions and community discussion
This project is licensed under the MIT License. See LICENSE for details.
This software is intended for authorized security testing, educational purposes, and research in controlled environments. Users are responsible for compliance with applicable laws and organizational policies. The authors make no warranties and assume no liability for use or misuse of this software.