Which integrations are available for this server?

Provides Docker-based sandbox execution for penetration testing tools, ensuring isolation and reproducibility; includes pre-built Ubuntu and Kali Linux images. Integrates with Google Gemini models via API for AI-powered security assessments, supporting multi-agent and autonomous modes. Allows n8n to act as an MCP client, enabling integration of Cracken's penetration testing capabilities into automated workflows. Supports Ollama for running local LLMs, enabling offline AI capabilities for penetration testing without external API dependencies. Connects to OpenAI's API to use GPT models for AI-assisted penetration testing, including task planning and tool orchestration.

How do I use Cracken?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Cracken scan example.com for open ports and services" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

Cracken

by keyreyla

Overview Schema Related Servers Score Discussions

Python

Hybrid

Cracken

AI Penetration Testing Framework

Python License Version Tests

Cracken — automated penetration testing powered by AI. Multi-agent, multi-provider, with TUI, headless CLI, and MCP server modes.

Quick Start

Option A: uv (recommended)

# Install uv (if not installed)
curl -LsSf https://astral.sh/uv/install.sh | sh

# Clone & setup
git clone https://github.com/keyreyla/cracken.git
cd cracken
uv venv --python 3.12
source .venv/bin/activate
uv pip install -e "."
playwright install chromium      # browser tool (optional)
cracken login                    # setup API keys
cracken                          # launch TUI

Option B: pip (standard Python)

git clone https://github.com/keyreyla/cracken.git
cd cracken
python3.12 -m venv .venv
source .venv/bin/activate
pip install -e "."
playwright install chromium
cracken login
cracken

Related MCP server: pentestMCP

Python Version Support

Python	Status
3.10	✅ Supported
3.11	✅ Supported
3.12	✅ Recommended
3.13	⚠️ Experimental
3.14	❌ Not supported (Docker base image issue)

Install Options (Dependency Variants)

Cracken uses optional dependency extras so you only install what you need:

uv pip install -e "."              # Core only (lightest) — LLM, TUI, CLI, tools
uv pip install -e ".[rag]"         # + RAG engine (sentence-transformers, faiss-cpu)
uv pip install -e ".[dev]"         # + Dev tools (pytest, black, mypy, isort)
uv pip install -e ".[all]"         # Everything above

Note on [dev]: ruff may fail to install in containerized environments (filesystem overlay bug). Use uv pip install black mypy isort pytest pytest-asyncio as workaround.

Features

Feature	Details
Multi-Agent Modes	`/assist` (single-shot), `/agent` (autonomous), `/crew` (orchestrator + workers), `/interact` (guided)
Live Model Switch	`/model` command with interactive popup — ↑↓ Enter Esc, real-time from 9Router
9Router Proxy	Auto-detect relay, fetch models & providers, seamless auth via `cracken login`
Auth Wizard	3 flows: 9Router relay, OpenAI-compatible relay, manual provider config (OpenAI, Anthropic, Gemini, DeepSeek, Groq, Tavily)
Extensible Tools	Drop a tool in `cracken/tools/<name>/__init__.py` — auto-discovered
RAG Engine	Optional FAISS + sentence-transformers for semantic knowledge retrieval
Report Generator	Auto-generate Markdown/HTML pentest reports with attack graphs
MCP Server	Expose as MCP server (STDIO/SSE) — `/mcp add stdio <name> <command>`
MCP Client	Connect to external MCP servers with auto-discovery (`/mcp add npx -y <package>`)
Security First	Scope validation, command injection guards, API key leak prevention, dedicated `tests/security/`
Async Architecture	Full async/await — concurrent tool execution, non-blocking agent loops

TUI Commands

Command	Description
`/assist <task>`	Single instruction + tool execution
`/agent <task>`	Autonomous agent loop
`/crew <task>`	Multi-agent orchestration
`/interact <task>`	Guided interactive chat
`/model`	Show/switch model interactive popup
`/target <host>`	Set assessment target
`/workspace <name>`	Create/activate workspace
`/notes`	View saved findings
`/report`	Generate pentest report
`/tools`	List available tools
`/mcp add <name> <command>`	Add MCP server (e.g. `npx -y package`)
`/mcp list`	Browse configured MCP servers
`/help`	Show help
`/clear`	Clear chat

MCP Server Setup

# In TUI — simple mode (auto-detect stdio):
/mcp add npx -y @modelcontextprotocol/server-filesystem /tmp

# Explicit mode:
/mcp add stdio my-server npx -y @modelcontextprotocol/server-filesystem
/mcp add sse my-server https://example.com/sse

Config saved to ~/.cracken/mcp_servers.json. Timeout: 300s (plenty for npx first download).

Configuration

Config stored in ~/.cracken/:

File	Purpose
`~/.cracken/litellm.json`	Provider config (API keys, model, api_base)
`~/.cracken/9router.json`	9Router relay config
`~/.cracken/mcp_servers.json`	MCP server definitions

Project Structure

cracken/
  agents/
    cracken_agent/  — Single autonomous agent
    crew/           — Multi-agent orchestrator
    prompts/        — Jinja2 prompt templates
  config/           — Settings, constants, 9Router, LiteLLM config
  interface/
    tui/            — TUI (Textual): app.py, screens.py, widgets.py, cracken.tcss
    cli.py          — Headless CLI mode
    login_cli.py    — Auth wizard
    reporter.py     — Report generator
  knowledge/        — FAISS RAG, embeddings
  llm/              — LiteLLM wrapper, memory
  mcp/              — MCP client manager, server transports
  runtime/          — Local and Docker execution
  tools/            — Built-in tools (browser, terminal, notes, web_search, finish)
  workspaces/       — Workspace isolation
tests/
  unit/             — Unit tests
  security/         — Security tests (API key leakage, injection)
  integration/      — Integration tests
assets/
  Cracken.png       — Project logo

Development

source .venv/bin/activate
uv pip install -e ".[dev]"        # install dev deps
python3 -m pytest tests/ -v --tb=short   # 670+ tests
python3 -m pytest tests/unit/ tests/security/ -x -q   # fast

Textual Dev Mode (live CSS reload)

textual run --dev cracken

Edit cracken/interface/tui/cracken.tcss — changes appear instantly without restart.

Legal

Only use against systems you have explicit written authorization to test. Unauthorized access is illegal.

License

Fork of PentestAgent by Masic.

This server cannot be installed

license - permissive license

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Appeared in Searches

PentestMCP - Penetration Testing MCP Server

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/keyreyla/cracken'

If you have feedback or need assistance with the MCP directory API, please join our Discord server