Is io.github.danoszz/penthera safe to use?

io.github.danoszz/penthera has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.danoszz/penthera?

io.github.danoszz/penthera supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.danoszz/penthera do?

io.github.danoszz/penthera provides 5 tools: Stable, Experimental, Beta, latest, License. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.danoszz/penthera?

io.github.danoszz/penthera is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.danoszz/penthera actively maintained?

io.github.danoszz/penthera is actively maintained - last commit was 1 day ago. It has 104 GitHub stars.

io.github.danoszz/penthera

penthera

Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.

104 1.9k/wk 5 tools GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, sse, http

5 tools · ~211 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.danoszz/penthera is an MCP server that offline, rule-based security checks for your repo, dependencies, AI agent config and local app. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 92/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-danoszz-penthera": {
      "args": [
        "-y",
        "penthera"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-danoszz-penthera)](https://mcppedia.org/s/io-github-danoszz-penthera)

Read me

What io.github.danoszz/penthera does

Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

92/100across 5 weighted dimensions

How we score →

0255075100

−8

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked penthera against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~211 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.danoszz/penthera safe to use?: io.github.danoszz/penthera has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.danoszz/penthera?: io.github.danoszz/penthera supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.danoszz/penthera do?: io.github.danoszz/penthera provides 5 tools: Stable, Experimental, Beta, latest, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.danoszz/penthera?: io.github.danoszz/penthera is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.danoszz/penthera actively maintained?: io.github.danoszz/penthera is actively maintained - last commit was 1 day ago. It has 104 GitHub stars.

Similar servers

Others in ai-ml

View all →

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.8k 8

Bla95

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

5.4k 1

io.github.callstack/agent-device95

Open source device layer for AI agents: control mobile, web, TV, and desktop apps over MCP

5.4k 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.danoszz/penthera and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-danoszz-penthera": {
      "args": [
        "-y",
        "penthera"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-danoszz-penthera)](https://mcppedia.org/s/io-github-danoszz-penthera)

Read me

What io.github.danoszz/penthera does

Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Your elite cyber security agent. Audit your app/site/code before you publish to protect yourself, and your users. Free, open source, offline. Penthera.

Penthera: your open-source cyber security agent

The security review you never had time for. Offline, rule-based, and you can verify every finding yourself.

penthera.org: check your live site in a few seconds. Passive, nothing stored.

Daily notes from Penthera: x.com/penthera_org

Who builds it: Daan van der Zwaag, part-time and in the open.

How it compares: next to Snyk, Socket, Semgrep, ZAP and GitHub.

New in 2.4: penthera --card makes a security receipt of your repo to post, every surface counts one set of problems with the same words, and 13 ways to hide a finding or stall a scan are closed (what changed).

From your coding agent: add Penthera (one line per agent), then say "Hey Claude, run Penthera on this repo."

132 readable rules · 6 read-only MCP tools · 0 runtime dependencies · 0 requests past loopback in the benchmark · MIT, no telemetry

A 12-second loop: npx penthera sets up a project, an offline scan runs in the terminal, the dashboard shows the verdict in Simple mode and the triage matrix in Advanced mode, and a fix is approved

`penthera ui`, Simple, dark	`penthera ui`, Advanced, light

What it is

Penthera checks your app, its dependencies and your AI coding tools on your own machine. It fixes what it can, with your approval. Every finding comes from a rule you can read, with its evidence at file:line. A model may propose; a rule decides.

It is also an open R&D project. We measure every check in public and publish the results, good or bad, so you can see how far to trust it.

It finds known classes of problems, not novel ones. It does not replace a human pentester.

Start in 30 seconds

You need Node.js 22 or later. No install, no account.

Building with Cursor, Claude Code, Codex, VS Code, Windsurf, Gemini CLI, Zed, JetBrains or Kiro, or an app builder such as Lovable, Bolt, Base44, Replit or v0? Penthera in your coding tool has the setup for each.

In your terminal. Run this in your project folder:

npx penthera

It detects your setup offline, asks what to check, and gives you a grade per area and the three things to fix first. It scans your running app on

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

92/100across 5 weighted dimensions

How we score →

0255075100

−8

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked penthera against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~211 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.danoszz/penthera safe to use?: io.github.danoszz/penthera has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.danoszz/penthera?: io.github.danoszz/penthera supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.danoszz/penthera do?: io.github.danoszz/penthera provides 5 tools: Stable, Experimental, Beta, latest, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.danoszz/penthera?: io.github.danoszz/penthera is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.danoszz/penthera actively maintained?: io.github.danoszz/penthera is actively maintained - last commit was 1 day ago. It has 104 GitHub stars.