Web Pentest MCP Server
Related Servers
Alternatives to Web Pentest MCP Server
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to perform authorized web-pentest reconnaissance and interaction, including crawling, headless-browser control, login/BOLA comparisons, safe probes, HAR replay, and evidence-first reporting, while enforcing declared scope, audit trails, rate limits, and data minimization.1MIT
- AlicenseNot gradedqualityBmaintenanceEnables MCP clients to carry out a compliant, non-destructive, auditable authorized security-testing workflow — project intake, scope reading, asset discovery, non-destructive verification, evidence collection, and report-draft generation with manual submission tracking — where every outbound action is gated by scope checks, one-time human confirmation tokens, rate limits, and append-only audit logging.MIT
- AlicenseBqualityBmaintenanceEnables AI agents to conduct authorized pentests and bug-bounty workflows with scope enforcement, audit logging, reconnaissance, safe vulnerability checks, payload/wordlist generation, and professional report generation.14MIT
- AlicenseCqualityBmaintenanceEnables authorized pentest and bug bounty workflows from any MCP client, with scoped recon, per-host rate limits, and scanner output turned into deduplicated, triaged finding cards.935 PyPI2MIT
- -licenseNot gradedqualityNot gradedmaintenanceEnables ethical security testing and attack surface management through SSL certificate validation, CVE queries, subdomain enumeration, security header analysis, and comprehensive reconnaissance capabilities. Designed for authorized penetration testing workflows with responsible disclosure practices.-
- AlicenseNot gradedqualityAmaintenanceEnables professional penetration testers to run reconnaissance, vulnerability scanning, brute-force checks, traffic capture, exploitation support, and report generation through a unified tool interface. Supports local and networked transports with bearer/OIDC authentication.172 npmGPL 3.0
TDQS
Scored across 10 tools
Most tools have distinct purposes, but there is meaningful overlap between run_pentest_pipeline and run_wstg_test because the pipeline can target a single WSTG objective while run_wstg_test also runs individual tests. run_surface_recon also partially overlaps with the pipeline's recon scan profiles. Descriptions help clarify when to use each, but an agent could still hesitate between them.
All tool names use snake_case and generally follow a verb_noun pattern such as manage_pentest_program, run_wstg_test, get_pentest_dashboard, and export_bugbounty_report. The few compound names like inspect_finding_or_evidence remain readable and consistent with the set.
The set contains 10 tools, which is well within the appropriate range for a focused pentest workflow. Each tool corresponds to a meaningful stage or operation: lifecycle management, scope, scanning, catalog lookup, evidence inspection, triage, and reporting.
The surface covers the core pentest lifecycle from program and scope management through scanning, triage, inspection, and reporting. Minor gaps remain around explicitly listing or managing findings beyond inspecting by ID, such as listing all findings or updating finding status, but these are workable given the dashboard and report tools.