Log inSubmit server
VMware Harden logo

VMware Harden

by zw008

Read-only VMware compliance scanning, baseline evaluation, drift detection, and remediation advice over MCP.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install VMware Harden

Run the project’s own setup commands, in order.

Setup steps from the project

zw008/VMware-Harden installs with its own commands rather than a config we can generate, so these are copied as-is. Run them in order in a terminal. Source: github.com

  1. 1. Install
    uv tool install "vmware-harden[collectors]"
  2. 2. Install
    pip install --no-index --find-links dist vmware-harden

Overview

zw008/VMware-Harden provides read-only compliance and hardening analysis for VMware vSphere and NSX environments through eight MCP tools. It scans collected inventory against CIS, vSphere SCG, STIG-aligned, 等保 2.0, PCI-DSS, EU NIS2, BSI IT-Grundschutz, and VMSA advisory baselines, while storing observations in a local DuckDB twin. Reach for it when an agent needs auditable configuration findings, drift checks, or remediation suggestions without directly changing managed infrastructure. Suggested fixes remain separate from enforcement, which is delegated to vmware-pilot's approval workflow.

Use cases

  • Scan vSphere hosts against CIS and VMware security baselines
  • Detect configuration drift across multiple vCenter environments
  • Check ESXi and vCenter builds against the offline VMSA catalog
  • Generate remediation suggestions without changing VMware infrastructure

Key features

  • Eight read-only MCP tools
  • Baseline scanning across multiple compliance frameworks
  • Local DuckDB twin for collected observations
  • Coverage-aware findings and drift detection
  • Offline VMSA known-vulnerability checks
  • LLM-assisted remediation advice with approval-gated enforcement

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked Today

Recent health check succeeded.

6/7 checks healthy over the last 90d

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars4Stargazers on the source repository.
Last commit7d agoMost recent push to the default branch.
Directory activity4 viewsConfig copies, upvotes, and views on AllMCPs.

How VMware Harden works

What zw008/VMware-Harden MCP server does

zw008/VMware-Harden MCP server evaluates VMware infrastructure against security, compliance, and vulnerability baselines. It connects to vSphere and NSX data collected through the related VMware skill family, then compares those observations with rules covering host, virtual machine, datastore, distributed firewall, and vCenter-related checks.

The package includes baselines for CIS ESXi, VMware vSphere Security Configuration Guides, China DJCP 2.0 Level 3, PCI-DSS 4.0, EU NIS2, BSI IT-Grundschutz, and a vSphere 9 STIG-aligned subset. An offline VMSA advisory catalog checks ESXi and vCenter builds against known VMware security advisories. The catalog can identify affected or fixed builds, but a clean result only covers advisories present when that catalog was assembled.

How it works

All eight MCP tools are read-only against managed vSphere and NSX infrastructure. A scan writes observations to the local twin database at ~/.vmware-harden/twin.duckdb; it does not modify VMware resources. Agents can use the returned findings, coverage information, and drift data to distinguish failed checks from checks that could not be evaluated.

Coverage is important when interpreting results. A rule may remain unevaluated if no collector supplies the attribute it requires. A rule can also be unknown for an individual host when the host is unreachable, the scanning account lacks permission, or the setting is unavailable. Consequently, zero violations does not by itself establish compliance.

Remediation advice is generated separately and can use Anthropic's API when ANTHROPIC_API_KEY is available. Without that key, the command falls back to a mock advisor. The server does not apply these recommendations; write operations are deferred to vmware-pilot, where approval and audit controls are available.

Setup and configuration

Install the collectors extra when scans need to read inventory:

bash
uv tool install "vmware-harden[collectors]"

For reporting against an existing twin database, the base package is sufficient:

bash
uv tool install vmware-harden

The command-line interface can list baselines, scan a named vCenter target, produce reports, inspect drift, generate advice, and start a local web dashboard. A typical scan selects a target and baseline, such as cis-vmware-esxi-8.0-subset or dengbao-2.0-level3-vmware. Source installations use the PEP 517 build system; offline deployments can build wheels on a connected machine and install them with pip --no-index.

Limitations and notes

The server is community-maintained and is not affiliated with, endorsed by, or sponsored by VMware or Broadcom. Its findings depend on the data available from the collectors and the privileges and reachability of the scanning account. Baseline coverage therefore varies by rule and node.

The VMSA catalog is offline and has a defined catalog date. Advisories published afterward are outside its results, and unknown build or product mappings are not treated as passes. The vSphere 9 STIG-aligned baseline is experimental and has been collector-verified on ESXi 8.0.3 rather than run against 9.x environments.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about VMware Harden

zw008/VMware-Harden is an MCP server that connects agents to collected VMware vSphere and NSX inventory for eight read-only tools covering baseline scans, reports, drift detection, coverage details, and remediation advice. It stores observations locally and does not apply changes to managed VMware infrastructure.

Install `vmware-harden[collectors]` with `uv tool install` when scans need inventory collectors. Install `vmware-harden` alone to report on an existing twin database. Offline installations can build wheels on a connected machine and install them with `pip --no-index`.

No, its MCP tools are read-only against vSphere and NSX. Scans write only observations to the local twin database, and remediation is not applied by this server. Write operations are deferred to vmware-pilot's approval and audit workflow.

Zero violations means no failures were found among checks that could run; it does not prove full compliance. Rules can be unevaluated when collectors lack required attributes, or unknown for nodes with missing data caused by reachability, permissions, or unavailable settings.

Yes, the `vmsa-advisories` baseline compares ESXi and vCenter versions and builds with an offline VMware advisory catalog. Results can identify affected or fixed components, but advisories published after the catalog date are outside its coverage.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewVMware Harden AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/zw008-vmware-harden?style=directory)](https://allmcps.com/mcp/zw008-vmware-harden)
HTML Embed
<a href="https://allmcps.com/mcp/zw008-vmware-harden"><img src="https://allmcps.com/api/badge/zw008-vmware-harden?style=directory" alt="VMware Harden on AllMCPs" /></a>