Provides support for installing required system tools on Debian-based systems for the local setup option
Provides containerized setup for the penetration testing tools, enabling isolated and consistent deployment of the MCP server and its dependencies
Supports configuration paths and setup instructions specific to Linux systems for Claude Desktop integration
Offers configuration paths and setup instructions specific to macOS systems for Claude Desktop integration
Supports local setup using Python 3.10+ for running the MCP server and its penetration testing tools outside of Docker
Offers installation instructions for system tools required by the penetration testing suite on Ubuntu/Debian-based systems
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Pentest Tools MCP Server scan example.com for XSS vulnerabilities"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
An MCP (Model Context Protocol) server for penetration testing tools, designed to work with various LLM clients like Claude Desktop, Roo Code, and other compatible MCP clients.
Comprehensive pentesting tools:
Directory scanning (FFuf, Dirsearch)
Vulnerability scanning (Nuclei, XSStrike)
API testing
Reconnaissance
And more...
Pre-configured wordlists from SecLists
Automated report generation
Claude Desktop integration
Related MCP server: redteam-mcp
Docker and Docker Compose (for containerized setup)
Claude Desktop application or other MCP-compatible client
Python 3.10+ and uv (for local setup)
Create the required directories:
# Create directories
mkdir -p reports templates wordlistsDirectory structure should look like this:
pentest-tools/
├── reports/ # For storing scan reports
├── templates/ # For report templates
├── wordlists/ # For custom wordlists
├── pentest-tools-mcp-server.py
├── config.json
├── requirements.txt
├── docker-compose.yml
└── DockerfileBuild and start the container:
docker-compose up -d --buildVerify the container is running:
docker-compose psCheck logs if needed:
docker-compose logs -fInstall dependencies:
uv venv
source .venv/bin/activate # On Windows: .venv\Scripts\activate
uv pip install -r requirements.txtInstall required system tools (example for Ubuntu/Debian):
sudo apt-get install nmap whatweb dnsrecon theharvester ffuf dirsearch sqlmapConfigure Claude Desktop:
Windows:
%APPDATA%\Claude\claude_desktop_config.jsonMacOS/Linux:
~/Library/Application Support/Claude/claude_desktop_config.jsonAdd server configuration:
For Docker setup:
{
"mcpServers": {
"pentest-tools": {
"command": "docker-compose",
"args": [
"run",
"--rm",
"pentest-tools",
"python3",
"pentest-tools-mcp-server.py"
],
"cwd": "\\Path\\to\\pentest-tools"
}
}
}If the above configuration doesn't work on Windows, try this alternative approach:
{
"mcpServers": {
"pentest-tools": {
"command": "cmd",
"args": [
"/c",
"cd /d \\path\\to\\pentest-tools && docker-compose run --rm pentest-tools python3 pentest-tools-mcp-server.py"
]
}
}
}Note about cwd (Current Working Directory):
cwd tells Claude Desktop which directory to run the command from
It must be the absolute path to the directory containing docker-compose.yml
On Windows, use double backslashes (\\) in paths
On Linux/MacOS, use forward slashes (/)
Restart Claude Desktop
Available commands in Claude Desktop:
Reconnaissance:
/recon example.comDirectory scanning:
/scan example.com --type directoryVulnerability scanning:
/scan example.com --type full
/scan example.com --type xss
/scan example.com --type sqli
/scan example.com --type ssrfAPI testing:
/scan api.example.com --type apiNatural language commands:
"Run a full security scan on example.com"
"Check for XSS vulnerabilities on example.com"
"Perform reconnaissance on example.com"
pentest-tools/
├── reports/ # Scan reports directory
│ ├── recon/ # Reconnaissance reports
│ ├── vulns/ # Vulnerability scan reports
│ └── api/ # API testing reports
├── templates/ # Report templates
│ ├── recon.html # Template for recon reports
│ ├── vuln.html # Template for vulnerability reports
│ └── api.html # Template for API test reports
├── wordlists/ # Custom wordlists
│ ├── SecLists/ # Cloned from SecLists repo
│ ├── custom/ # Your custom wordlists
│ └── generated/ # Tool-generated wordlists
├── pentest-tools-mcp-server.py # Main MCP server
├── config.json # Tool configuration
├── requirements.txt # Python dependencies
├── docker-compose.yml # Docker configuration
└── Dockerfile # Container definitionAlways ensure you have permission to scan targets
Keep tools and dependencies updated
Review scan results carefully
Follow responsible disclosure practices
This server cannot be installed
Unclaimed servers have limited discoverability.
If you are the server author, to access and configure the admin panel.
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Scans MCP servers for tool poisoning, prompt injection and supply chain risks.
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ch1nhpd/Pentest-Tools-MCP-Server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server