Pentest Mcp
NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.
ActiveNot tested
60BNo CVEsactiveMIT
Quick Install
{
"mcpServers": {
"pentest-mcp": {
"args": [
"-y",
"pentest-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/pentest-mcp)
Should you use this server?
Professional penetration-testing MCP server with modern transport/auth support and expanded recon tooling.
✓
Is it safe?
No known CVEs for pentest-mcp.
No authentication — any process on your machine can connect.
MIT. View license →
✓
Is it maintained?
Last commit 16 days ago. 131 stars. 81 weekly downloads.
i
Will it work with my client?
Transport: stdio, sse, http. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'pentest-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Score Breakdown
Security
23/30No known vulnerabilities.
✓
○
Tool safety — No tools to analyze
○
Tool poisoning — No tools to analyze
○
Injection vectors — No tools to analyze
✓
Tool stability — Tool definitions stable
○
Dependency health — found on deps.dev, recently updated
✓
License — License: MIT
○
Authentication — No authentication required
