"Information on Penetration Testing (Pentest)" matching MCP servers:

An LLM-driven API testing platform exposed over MCP, enabling declarative test definition and DAG-based execution.

A lightweight, local-first MCP server for executing HTTP requests and managing API collections and environments without cloud dependencies. It enables testing APIs, handling authentication, and importing OpenAPI specifications directly within MCP-compatible workflows.

Enables natural-language chat-driven API testing, letting users upload API specs, run deterministic pytest checks against live targets, inspect results, create defects, and view failure trends.

A full-stack API automation testing server that parses OpenAPI/Swagger/Postman/HAR specs, generates comprehensive test scenarios and executable code, and provides AI-powered review and auto-fix.

An MCP server that integrates various penetration testing tools, enabling security professionals to perform reconnaissance, vulnerability scanning, and API testing through natural language commands in compatible LLM clients like Claude Desktop.

Enables AI assistants to perform automated security audits on APIs, detecting BOLA/IDOR vulnerabilities by comparing responses across user tokens.

Enables MCP-compatible clients to discover API endpoints from OpenAPI/Swagger specs, send HTTP requests, validate responses, and analyze status codes for automated API testing.

A standardized MCP server designed for testing integration with the Des MCP Server Testing API. It allows AI agents to interact with testing endpoints using tools implemented via the Model Context Protocol.

Enables HTTP API testing (GET, POST, PUT, DELETE) via the Model Context Protocol, powered by Playwright.

A local testing tool for APIs, web browsers, and phone UI using the Model Context Protocol.

A Model Context Protocol server for LLM fuzzing and testing, providing secure access to multiple AI providers through a standardized interface.

Implements a secure MCP server with API Key and JWT authentication, providing tools like echo, login, secure_action, and admin_action. Includes MCP Inspector integration for testing and debugging.

HTTP Inspector MCP Server enables sending arbitrary HTTP requests, viewing history via a web panel, and taking screenshots of the panel for AI penetration testing workflows.

Enables Claude to create local, persistent mock REST APIs on demand from plain-language descriptions, with data written to disk so it survives restarts.

MCP server for discovering and calling 400+ practical APIs through six compact tools, with free catalog search and pay-per-call x402 execution on Base.

Automated QA for .NET microservice backends and React frontends, enabling API contract testing, UI crawling, YAML flows, and run diffing against a stage environment.

Enables load testing and validation of an order API by generating synthetic orders, previewing them, and sending batches while enforcing guardrails like bounded counts and fixed seeds for replay.

A TypeScript-based MCP server that enables testing of REST APIs through Cline. This tool allows you to test and interact with any REST API endpoints directly from your development environment.

Validates OpenAPI specs from files, inline content, or URLs, and generates prompts for agent developers based on the API analysis.

Enables testing how different MCP clients handle tool results containing both content and structuredContent, including outputSchema enforcement and mismatch scenarios.

Webhook management and testing tools for AI agents. Provides tools for sending, validating, generating, and debugging webhooks.

An MCP server for interacting with Treasure Data API, allowing users to retrieve database information and check server status through natural language queries.

Enables LLMs to send HTTP requests to a local development server, allowing interaction with APIs running on localhost.

An MCP server that provides tools to interact with the JSONPlaceholder fake REST API for testing and prototyping, supporting CRUD operations on posts, comments, todos, and users.

Enables interaction with Webhook.site to create, manage, and monitor endpoints for capturing HTTP requests, emails, and DNS lookups. It provides 16 tools for testing webhooks and inspecting incoming data through the Model Context Protocol.

Enables testing and validation of APIs for AI agent compatibility, providing scores, grades, and actionable recommendations.

Generates schema-compliant mock data from OpenAPI JSON Schema definitions using AI, enabling seamless testing without manual fixtures.

A reusable MCP server for QA automation testing that enables running tests across web apps, APIs, CLI tools, and more directly from Claude Desktop.

Enables AI assistants to help developers build on the monday.com GraphQL API by validating queries, explaining errors, providing column value formats, introspecting the live schema, executing queries, and scaffolding boilerplate code.

Exposes Specmatic's API contract testing, resiliency testing, and mocking capabilities to AI coding agents via natural language, enabling automated validation and simulation of API behaviors.