Faction FAQs

Question 1

What specific data can AI clients access through Faction MCP?

Accepted Answer

AI clients can access comprehensive assessment details (notes, executive summaries), detailed vulnerability data (status, tracking IDs), retest and verification queues, and system-wide or assessment-specific audit logs. This allows for rich data-driven AI interactions.

Question 2

What are the prerequisites for setting up Faction MCP Server?

Accepted Answer

To set up Faction MCP Server, you'll need Docker (or Podman), a running Faction instance, and a Faction API key. Installation can be done conveniently via the Docker Desktop MCP Catalog or manually using Docker Compose.

Question 3

What is Faction MCP Server?

Accepted Answer

Faction MCP Server is a bridge that exposes assessments, vulnerabilities, retests, and audit logs from the Faction penetration testing management platform to any MCP-compatible AI client. It enables AI tools to interact with and leverage your pentesting data.

Question 4

How does Faction MCP help with generating executive summaries?

Accepted Answer

Faction MCP includes an optimized data retrieval tool (`get_vulnerability_summary_data`) specifically designed to provide clean, stripped vulnerability text. This data is ideal for Large Language Models (LLMs) to generate accurate and concise executive summaries efficiently.

Question 5

Can AI clients manage retests and vulnerability statuses via Faction MCP?

Accepted Answer

Yes, Faction MCP provides tools for AI clients to manage retest and verification queues. AI can schedule new retests, mark existing retests as passed or failed, and update vulnerability statuses (e.g., setting remediation closed dates or tracking IDs).

Faction

Faction

Key Features

Use Cases

Key Features

Use Cases