Constellation MCP — Xavani drives the whole Enternovate stack
One MCP server, twenty-three tools, five products. Xavani Agent connects once and can scan your attack surface, query your knowledge graph, audit a website, check your email posture, and run a POPIA assessment — all as native tools.
The Enternovate constellation is five local-first security tools. This bundle exposes every one of them through the Model Context Protocol, so any MCP-capable agent — Xavani first among them — can drive them from a single connection.
Tools
| Group | Tool | Backing CLI |
|---|---|---|
| Gavaza (attack surface) | gavaza_scan, gavaza_report, gavaza_status, gavaza_alerts |
gavaza |
| Nyarhi (knowledge graph) | nyarhi_add_node, nyarhi_add_edge, nyarhi_find, nyarhi_neighbors, nyarhi_path, nyarhi_stats |
nyarhi |
| Mhangani (web audit) | mhangani_audit, mhangani_report, mhangani_history, mhangani_clear |
mhangani |
| MailArmor (email security) | mailarmor_check, mailarmor_report, mailarmor_history |
mailarmor |
| Nkwazi (POPIA compliance) | nkwazi_assess, nkwazi_generate, nkwazi_report, nkwazi_breach_add, nkwazi_breach_list, nkwazi_conditions |
nkwazi |
Each tool shells out to the product's CLI and returns its output — JSON passthrough for report commands, plain text otherwise. No vendor coupling: if the CLI isn't installed, the tool returns a clear error.
Install
pip install . # installs all six entry points
# or from GitHub:
pip install git+https://github.com/enternovate/constellation-mcp.git
Add to Xavani
xavani mcp add constellation-mcp --command constellation-mcp
# or a single product:
xavani mcp add gavaza-mcp --command gavaza-mcp
Entry points: constellation-mcp (all 23 tools), gavaza-mcp, nyarhi-mcp, mhangani-mcp, mailarmor-mcp, nkwazi-mcp (single-group servers). All stdio.
Prerequisites
The five constellation CLIs must be installed and on PATH:
pip install gavaza nyarhi mhangani mailarmor nkwazi
# (or install each from its repo — see the constellation READMEs)
Development
pip install -e ".[dev]"
pytest tests/ -q
ruff check src tests
License
MIT — Copyright (c) 2026 Enternovate (Pty) Ltd.
