Skip to main content
Glama
lucianoengel

pentest-mcp

by lucianoengel
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Related Servers

Alternatives to pentest-mcp

No user-submitted related servers found.

    Related Servers

    • backscroll

      soren-achebe
      A
      license
      A
      quality
      A
      maintenance
      Records your terminal sessions per command (PTY + OSC 133) into local SQLite, so AI agents can search, retrieve, and diff what commands actually printed. Secret redaction is applied by default to everything served over MCP.
      4
      7
      MIT

    • Pentest MCP

      hannahmattsson734
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables professional penetration testers to run reconnaissance, exploitation, brute-force, traffic-capture, and reporting workflows through MCP tools over STDIO/HTTP/SSE transports with bearer/OIDC authentication and Dockerized host tooling.
      298 npm
      GPL 3.0

    • Pentest MCP

      JuliaHartmann78517
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables authorized penetration testers to run reconnaissance, enumeration, vulnerability scanning, brute-force checks, traffic capture, and exploitation workflows via MCP tools, with STDIO/HTTP/SSE transport support. It also manages engagement records and generates client reports.
      298 npm
      GPL 3.0

    • Pentest MCP

      jacquelinem3372
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables professional penetration testers to run and coordinate reconnaissance, scanning, brute-force, exploitation, traffic capture, and reporting tools through MCP, with stdio/HTTP/SSE transports and bearer/OIDC authentication.
      298 npm
      GPL 3.0

    • witness

      IngTian
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables agents to query a dated, provenance-backed history distilled from any text stream, turning raw records into observations, bi-temporal facets, and narratives over MCP.
      10
      MIT

    • Pentest MCP

      jacquelineeriksson
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables professional penetration testers to run reconnaissance, exploitation, brute-force, and credential-cracking tooling (nmap, gobuster, nikto, John the Ripper, hashcat, subfinder, httpx, ffuf, nuclei, hydra, sqlmap, tcpdump) through MCP clients over stdio or HTTP. It also captures engagement records and generates client reports with scope-of-work handling and bearer/OIDC authentication.
      298 npm
      GPL 3.0
    Deploy Server
    Context All Your Agents Can ShareAgents share what they learn, hand off work, and hold it when you switch models. Start with 5 GB free.fulcradynamics.comAd

    TDQS

    A3.6/5.0

    Scored across 15 tools

    Disambiguation5/5

    Each tool targets a distinct resource and action: listing vs getting vs updating findings/tasks/entities, searching, tracing provenance, recording observations. No two tools appear to do the same thing, and overlaps like list_findings vs get_finding are cleanly separated by collection vs singleton semantics.

    Naming Consistency5/5

    All tool names follow a consistent lowercase_verb_noun pattern (get_, list_, search, record_, update_). Verbs are uniform and actions are clear from names alone, with no camelCase or mixed conventions.

    Tool Count5/5

    15 tools is well within the ideal range for a specialized MCP server. Each tool serves a distinct purpose in the penetration-testing workflow (observation, analysis, status management, provenance), with no redundancy or bloat.

    Completeness4/5

    The surface covers the full investigation lifecycle: capture review, entity management, finding workflow (candidate/confirm/reject), task tracking, provenance tracing, and operator note-taking. Minor gaps exist (no explicit engagement creation/deletion or direct entity editing), but these are addressable via record_observation and do not create dead ends.

    Maintenance

    ActivitySlowing
    ResponsivenessNo issues

    Resources