VMware Harden
Connects to vCenter environments to run compliance scans against six built-in baselines: CIS ESXi 8.0, vSphere SCG v8, Chinese GB/T 22239 Level 3, PCI-DSS 4.0, EU NIS2, and BSI IT-Grundschutz. Exposes six read-only MCP tools for listing baselines, checking violations, viewing drift events, and running scans across hosts, VMs, datastores, and NSX DFW rules. Built on a DuckDB-backed digital twin that tracks configuration state. Includes an LLM-powered remediation advisor that generates fix suggestions for critical findings. Reach for this when you need programmatic access to VMware compliance data during security reviews or when building automation around 87 hardening rules. Part of the broader vmware-* skill family for infrastructure operations.
- GitHub stars
- 4
- tools
- 8
- transport
- STDIO
- last updated
- Jul 21, 2026
Tools
8 toolsPublic tool metadata for what this MCP can expose to an agent.
list_baselines
No parameter schema in public metadata yet.
get_baseline_rules
No parameter schema in public metadata yet.
list_stig_controls
No parameter schema in public metadata yet.
describe_stig_content_sync
No parameter schema in public metadata yet.
list_violations
No parameter schema in public metadata yet.
get_remediation
No parameter schema in public metadata yet.
list_drift_events
No parameter schema in public metadata yet.
scan_target
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
VMware-Harden
Turn VMware compliance checks into findings with visible coverage gaps.
English · 简体中文
Community-maintained · MIT · Not an official VMware/Broadcom product.
Synthetic-data GIF; video includes redacted historical screenshots. Download the AI-narrated family introduction (~3 min)
Why use it?
- Scan supported baselines and vulnerability/build evidence.
- Track configuration drift in a local Twin.
- Separate remediation suggestions from remote execution.
Get started
Install the published CLI and inspect its commands:
Details
- Repository
- github.com/zw008/vmware-harden
- Package
vmware-harden- Transport
- STDIO
- Registry
- MCP registry, active