"An overview of penetration testing (pentest)" matching MCP servers:

An MCP router that connects to multiple PagerDuty sandbox environments for testing integrations like PD+Teams, PD+Jira, and more.

Supply chain risk scoring for npm, PyPI, and GitHub repos

Free remote MCP for Core Web Vitals metrics by CMS, CDN, and framework (Chrome field data + multi-site crawl). No auth. Endpoint: https://www.corewebvitals.io/api/state-of-cwv/mcp

MITM proxy MCP server that intercepts and verifies AI agent tool calls, detecting fabrication, tracking costs, verifying outcomes, and inferring user satisfaction.

Enables AI agents to manage a Canonical Landscape estate, including inventory, alerts, patching, and script execution, with built-in safety layers to prevent accidental destructive actions.

MCP server that wraps Nightjar's analytics API, enabling Claude Code to query events, funnels, dashboards, and metrics through natural language.

Identifies resource-intensive processes on macOS across CPU, memory, and network usage, with tools for detailed process filtering and system overview.

Enables AI assistants to monitor, analyze, and configure OWASP ModSecurity CRS via Docker, with tools for overview, drill-down, and rule/IP management.

Local MCP server for Java heap dump analysis with Eclipse MAT: heap overview, histograms, dominator trees, threads, OQL, leak suspects, and OOM diagnosis.

Enables querying a self-hosted Plausible Analytics instance to retrieve compressed analytics data such as overview stats, top pages, traffic sources, and trends, with computed deltas and human-readable filters.

An MCP server connecting Claude AI with game engine runtimes (Unity & Godot) for automated testing, log filtering, and scene hierarchy inspection.

Enables AI assistants to interact with SmartBear's suite of testing and monitoring tools including BugSnag, Swagger, Reflect, and more through natural language, allowing querying of testing data, analysis of performance metrics, and management of test automation.

Enables MCP clients such as Claude, Copilot and IDE agents to interrogate a building's digital twin in plain language through seven tools covering building overview, room lists, per-room design promises, diagnosed findings, room time series, sandboxed read-only SQL and BCF issue export. Answers whether each room still meets its own design intent — and why not — instead of relying on fixed thresholds.

A read-only MCP endpoint that lets any AI agent query a histology lab's live case, block and station state via tools such as get_case, list_alerts and cases_delayed, plus a shift_handover prompt and an overview resource. It surfaces workflow alerts, delays and handoff estimates so agents can produce sourced briefs without ever mutating lab data.

Enables read-only access to GA4 accounts and properties via tools that list properties, fetch settings and metadata, and run standard, realtime, and one-call overview reports. It is stateless and takes a Google access token on every request, letting one deployment serve many accounts behind an auth proxy.

Enables safe, read-only access to AntOps Change Risk status and history, private documents, workspace overview, and integration configuration via an allow-listed stdio interface.

Enables querying privacy-focused website analytics from Plausible's read-only Stats API v2, with tools for overview, timeseries, breakdown, and goal performance metrics.

A security-hardened, read-only MCP server that authenticates service and user identities, enforces factory-level access grants, and audit-logs every tool call before dispatching read-only plant overview queries.

An MCP server that connects a local LLM to an industrial PLC via Modbus TCP, enabling process reading, alarm correlation, and safe diagnosis with restricted write access through an allowlist. Includes a simulated PLC with real physics for local testing.

Enables retrieval of simulated device logs (activation, LAN, WLAN) and Kafka status for testing purposes by querying with device serial numbers.

An MCP server exposing Kubernetes-style diagnostic tools to an LLM agent, with a safety approval gate for destructive actions, all backed by a mock cluster for local testing.

An MCP server for querying Grafana Loki directly with a discovery-first workflow — labels, values, series, and LogQL queries without requiring Grafana.

An MCP server that records agent execution metrics and exposes a Context Window Explorer to visualize exactly what entered the model's context window across sessions, tokens, and tool calls.

Bridges Microsoft Clarity's analytics API with Claude, enabling custom date ranges and page-level filtering on top of Clarity's native limitations.

Enables classification of GPU workloads as training, inference, or idle from telemetry data, with tools for one-shot classification, benchmarking, and audit log verification.

Relays error logs from other MCP servers when an LLM call fails and the returned error message is unclear, helping the model handle errors more intelligently.

Enables agents to fetch app reviews from Apple's App Store and Google Play per country store, newest first, filtered by date or star rating, with each scheduled run returning only reviews not seen before. It also returns a per-app, per-country rating trend row with the current rating, rating count, change since the last run, and the star split of new reviews.

Enables recurring website maintenance checks — domain registration, SSL certificates, uptime, technical SEO and accessibility — across a portfolio of client sites, using publicly available information. Results are returned as structured data and can be sorted by urgency into a client-ready report.

A local, read-only stdio MCP server that lets a Grok Build CLI agent check how much of its weekly SuperGrok / Grok Build usage pool is left, when the period resets, and its Extra Usage cap via tools like get_budget. It reads the existing grok login session and returns per-product figures as JSON, mirroring the TUI /usage screen, so agents can pause before expensive work when quota runs low.

Enables analysis of JVM thread dumps to detect deadlocks, CPU spikes, pool exhaustion, and virtual thread pinning, returning a health score and interactive report link.