"Information on Penetration Testing (Pentest)" matching MCP servers:

Code-aware browser testing agent — reads your codebase, understands functionality, tests every element, reports with screenshots. Works as MCP server for Cursor/Claude Code or standalone CLI.

A Model Context Protocol server that integrates essential penetration testing tools (Nmap, Gobuster, Nikto, John the Ripper) into a unified natural language interface, allowing security professionals to execute and chain multiple tools through conversational commands.

Enables calculation of the 2025-2028 federal overtime, tips, and senior deductions — applying IRS caps, MAGI phase-outs, and bracket tables — plus eligibility explanations and estimated federal tax savings.

On Board is a local MCP server that gives multiple AI agents and IDEs a shared project memory, ticket queue, and handoff history, so agents can seamlessly continue each other's work. It supports agent-to-agent wake events, enabling autonomous workflows like reject-fix-resubmit cycles without human relay.

Enables users to audit personal reading streams by quantifying category diversity with Shannon entropy, detecting lexical redundancy and echo chambers via Jaccard similarity, and ranking content sources by decibel signal-to-noise ratio for pruning recommendations.

Provides access to Canadian federal parliamentary data (debates, bills, MPs, votes, Hansard transcripts) and legal information (case law and legislation through CanLII) for research and analysis.

Local-first supply-chain CVE scanner. Scans project deps, system packages (Homebrew/apt), and IDE extensions (VS Code, JetBrains) via OSV, NVD, GHSA, EPSS, and CISA KEV. Listed in the official MCP Registry as io.github.DevInder1/tridentchain-security.

Enables AI agents to start, control, and verify local open.mp/SA-MP game servers via MCP stdio, using a headless RakClient to send allowed slash commands and assert round-trip responses.

Read-only MCP connector that serves the Run It on AI book. The index and Implementation Blocks are free; full chapters and playbooks unlock with a license key included with the book.

Free, MIT-licensed MCP testing harness with Jay: risk-based testing workflows, exploratory and regression checks, accessibility investigation, bug triage, disposable demos, and protected local evidence reports. Runs locally via @testers-ai/carbon-mcp; the coding agent supplies model, browser, and shell access, and analytics defaults off in the npm edition.

A template for deploying MCP servers on Cloudflare Workers with OAuth authentication, enabling remote access to MCP tools via SSE transport from Claude Desktop and other MCP clients.

On-chain delivery receipts for x402 AI-agent payments on Solana: anchors SHA-256 digests of delivered content to a PDA after settlement; buyers verify proof of delivery offline with zero trust in the seller. Live MCP endpoint + npm bridge.

Laya-MLX as an MCP server (and plain-HTTP API). It answers typed decisions — choose an option / score a rubric / is this true? — on your own machine (Apple Silicon / MLX), with no cloud and ~10ms after warm-up. Not a chatbot. No token-by-token text, no JSON that can break. One forward pass returns a structured answer you can branch on. Ideal for routing, triage, classification, lead scoring, and g

Enables Android APK reverse engineering and Flutter runtime injection through a six-step pipeline of decompile, analyze, synthesize, inject, patch, and repackage. Provides MCP tools for authorized security research and penetration testing.

A server that provides AI assistants programmatic control of Safari browser on macOS for web automation, testing, and debugging.

Enables authorized pentest and bug bounty workflows from any MCP client, with scoped recon, per-host rate limits, and scanner output turned into deduplicated, triaged finding cards.

Enables AI-assisted penetration testing by connecting MCP clients to a Windows API server for executing penetration testing tools like nmap, ffuf, nuclei, and other security tools. Allows AI agents to perform automated security assessments, solve CTF challenges, and assist with ethical hacking tasks through natural language commands.

Bridges large language models with the Metasploit Framework to enable natural language control over penetration testing workflows. It provides tools for searching modules, executing exploits, generating payloads, and managing active sessions.

CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.

Authorized Android pentest lab, drivable by hand or by AI — Frida bypass chain, live traffic capture with automatic IDOR flagging, full MCP control plane, web dashboard.

Enables ethical security testing and attack surface management through SSL certificate validation, CVE queries, subdomain enumeration, security header analysis, and comprehensive reconnaissance capabilities. Designed for authorized penetration testing workflows with responsible disclosure practices.

A locally runnable stdio MCP server for Fortrip hotel search, live room rates, hotel details, trip planning and booking payment links. Uses a Fortrip CLI token or saved CLI login; payments are completed by the user on Fortrip and Stripe.

Plori runs AI agents in Workspaces. A Workspace is a project folder in the cloud. Several agents can work in it at the same time, each on its own copy of the files, and Plori merges their work back into the folder. Every version of the files is kept.

Enables finding information online, reading web pages, finding images, capturing screenshots, and performing multi-source research with per-answer confidence.

An MCP server that gives an AI agent long-term memory it cannot read. VaultZero is a privacy-first memory vault: this package embeds and encrypts every memory on your machine before it is sent, so the server stores ciphertext and vectors and never holds a key.

Rug pull risk scores and on-chain forensics for memecoins on Solana, Ethereum, Base and Robinhood Chain - launch-bundle detection, funding-origin tracing, deployer history, insider networks and whale flow. 15 read-only tools.

Classifies job titles into department and seniority using deterministic rules, and optionally verifies if a person is listed on their employer's website via the Mamba Labs Contact Classifier Apify actor.

Source-backed hardware end-of-life (EOL/EOSL) lookups by part number for enterprise gear — support status, end-of-sale and end-of-support dates, with the vendor's own bulletin URL on every answer. Unknown parts return found:false, never a guess.

Bridges Microsoft Clarity's analytics API with Claude, enabling custom date ranges and page-level filtering on top of Clarity's native limitations.

A machine-facing licensing and settlement rail for AI agent content access. search_pockets and list_pockets work with no key. pull_content needs a funded key and returns HTTP 402 with a registration URL when it has none. Every access, paid or refused, writes its own row with a receipt on both sides. $0.0025 default per pull, owners set their own. 85% to the creator.