"An overview of penetration testing (pentest)" matching MCP servers:

Enables authorized penetration-testing workflows through MCP by exposing tools for network scanning, web fuzzing, subdomain enumeration, vulnerability scanning, brute-force checks, packet capture, and report generation with HTTP/STDIO/SSE transports and bearer/OIDC authentication.

Enables professional penetration-testing workflows through MCP, including reconnaissance, web/content scanning, brute-force checks, traffic capture, exploitation sweeps, wordlist generation, and engagement reporting over stdio, Streamable HTTP, and legacy SSE.

Enables AI coding assistants to perform authorized attack-surface reconnaissance and vulnerability intelligence through stdio JSON-RPC tools for HTTP probing, TCP port scanning, directory discovery, template checks, and CISA KEV/cve.now lookups.

Enables professional penetration testers to run reconnaissance, network and web scanning, content fuzzing, vulnerability templates, brute-force checks, SQLi extraction, traffic capture, and engagement report generation through MCP clients.

Enables professional penetration testers to run reconnaissance, vulnerability scanning, brute-force checks, traffic capture, and client-report generation with stdio, HTTP, or SSE transports and optional bearer/OIDC authentication.

Enables professional penetration testers to run reconnaissance, vulnerability scanning, brute-force checks, traffic capture, exploitation support, and report generation through a unified tool interface. Supports local and networked transports with bearer/OIDC authentication.

Provides role-based access to the Cisco Meraki Dashboard API via MCP, enabling management and monitoring of Meraki networks, devices, firmware, and licenses through natural language tools.

Enables AI assistants to directly invoke Kali Linux network tools for network maintenance and security assessment, with 19 tools including port scanning, DNS queries, and penetration testing.

A Dockerized Kali Linux MCP server that enables LLMs to perform network security scans, penetration testing, and reconnaissance using tools like Nmap, Nikto, Hydra, and SQLMap.

An MCP server that lets an AI assistant manage your Keenetic router in plain language — list connected devices, pin static DHCP leases, rename devices, check WAN status, and reboot.

Enables an LLM to read and write NetBox data through its REST API, supporting listing endpoints, inspecting schemas, and creating, updating, or deleting objects.

Provides read-only SSH access to network devices (routers, switches, firewalls) with command allow/deny policies, nt-templates output parsing, and an audit trail, enabling an AI agent to query device state securely.

MCP (Model Context Protocol) server for rustunnel. Lets AI agents (Claude Code, Cursor, Windsurf) create and manage public tunnels to local services from inside an agent session.

Enables an LLM agent to investigate a Kong Gateway through fourteen read-only, schema-validated tools and a deterministic diagnostic engine, so it can trace routes, services, plugins and upstream health and explain faults such as why authentication is failing on a path. Every fact comes from the gateway itself, and the model only selects tools and writes the evidence-backed explanation.

Lets an agent mint and manage its own hostnames on DNSMint, through the Model Context Protocol.

Enables AI agents to access a continuously updated list of verified free proxies and a rotating proxy server through the Model Context Protocol.

An MCP server that analyzes firewall rule overlap, duplication, shadowing, and conflicts across multi-vendor firewall policies.

Enables AI agents to classify IP addresses through the VPNDetection API with read-only tools that detect VPNs, residential and datacenter proxies, Tor nodes, relays, hosting providers and CDNs, in single or bulk lookups of up to 100 addresses. It also exposes which datasets an organisation is licensed for, along with their metadata and published checksums.

MCP server to manage and inspect a ZTE ZXHN F680 GPON router, enabling conversational control of NAT/port forwarding and reading WiFi, DHCP, DMZ, WAN, and device status from MCP-compatible clients.

Exposes network-monitoring tools (query metrics, analyze windows, compare, logs, status, runbooks, speed tests) as an MCP server for agentic workflows. Designed with evaluation suites, cost-aware model routing, and semantic tool retrieval.

An MCP server for domain name availability checking, WHOIS lookups, and domain suggestions — no API key required.

An MCP server that gives an AI agent safe, high-level control over Namecheap domains – availability checks, registration, DNS, email forwarding, transfers, WhoisGuard privacy, and account balance via Namecheap's XML API. Designed for safe LLM interaction with built-in confirmation gates and read-modify-write DNS operations.

An MCP server that lets Claude monitor and manage a TrueNAS box in plain English. It is deliberately read-only, providing tools to check alerts, storage pools, snapshots, services, and more.

Enables natural language orchestration of multi-vendor network infrastructure by combining NAPALM for structured data retrieval and Netmiko for CLI execution via Nornir.

Self-hostable uptime monitoring with an MCP server for managing monitors, incidents, and status pages. Runs with Docker and Postgres, with Streamable HTTP, OAuth, and API key authentication.

Answers "what is this IP" by matching addresses against a synced local copy of Azure service tags and live reverse DNS lookups, including the reverse direction of listing every CIDR prefix for a given service-tag name. Every answer is honestly labeled with the source that produced it, a sync timestamp, and an explicit null/status when a source didn't resolve, so nothing is fabricated.

MCP server for live IP and domain reputation checks via DNS lookups, providing abuse scores and network type without requiring an API key.

Manage Caddy web servers from Claude Code, Cursor, and any MCP client with 18 tools + 4 resources covering every endpoint of Caddy's admin API — config, routes, reverse proxies, TLS, PKI, metrics, snapshots.

An MCP server for managing Hetzner DNS zones and RRSets via the Hetzner Cloud API. It enables listing, creating, updating, deleting, importing/exporting zone files, and managing protection and TTLs from MCP clients.

An MCP server for domain intelligence — WHOIS, DNS records, SSL certificate inspection, SPF/DMARC validation, security-header audits, and blacklist/reputation checks, callable by AI agents. Powered by domainintel.app; runs server-side, no local setup.