"An overview of penetration testing (pentest)" matching MCP servers:

1Panel MCP Server is an implementation of the Model Context Protocol (MCP) server for 1Panel.

Serves offline document validation and evaluation operations of the Judgment Pack Specification to MCP clients over stdio, enabling agents to validate and evaluate JPS documents as tool calls. Supports conformance validation, experimental evaluation with disposition and error classes, and corpus testing.

An MCP (Model Context Protocol) server for managing Tailscale resources using the official Tailscale Go client library v2. This server provides complete coverage of the Tailscale API with enhanced, self-descriptive tools powered by OpenAPI documentation.

Perform DNS lookups, WHOIS queries, connectivity testing, TLS certificate analysis, HTTP endpoint monitoring, and hostname resolution, all from your trusty AI.

Enables AI agents to orchestrate 100+ security tools over MCP for authorized penetration testing, including recon, scanning, exploitation, attack-chain planning, and knowledge-base retrieval.

CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.

First-party MCP server and CLI for Xcode and iOS Simulator automation. Enables control of Xcode and iOS Simulator via MCP tools for tasks like building, testing, and automation.

Enables AI agents to manage and analyze personal investment portfolios, including fund and stock holdings, net value tracking, XIRR calculations, penetration analysis, and backtesting.

AI-native security testing platform with native MCP support, enabling automated penetration testing, vulnerability discovery, and attack-chain analysis through conversational commands.

MCP server for atest (api-testing), enabling natural language interaction with API testing workflows.

CNN's Fear & Greed index for the US stock market: current score and rating, the seven component indicators, and about a year of daily history. Go standard library only, no API key required.

An MCP server for querying Grafana Loki directly with a discovery-first workflow — labels, values, series, and LogQL queries without requiring Grafana.

ContextLattice is an HTTP-first, MCP-compatible memory/context/task orchestrator that persists writes and returns fused recall from specialized stores with local-first defaults. Primary URL: https://contextlattice.io/ Install: https://contextlattice.io/installation.html Troubleshooting: https://contextlattice.io/troubleshooting.html

An MCP server providing web search, image search, and page scraping tools to LLMs without requiring API keys.

Fetches documents by URL, DOI, ISBN, PMID or PMCID, and reports a block as a block, never as an empty success.

An MCP front-end for AnB. The tool surface is "use-don't-reveal": no tool returns a plaintext secret. Reveal paths require a TTY the server doesn't have, so the no-reveal guarantee is structural, not prompt-based — it holds even against a prompt-injected agent. Runs as a dedicated, narrowly-scoped AnB identity; exec is default-deny (only allowlist rules tagged scope=mcp run); command output

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server. Every finding maps to a specific PCI DSS requirement ID. Taint-aware cardholder data flow analysis with PCI SSC FAQ semantics, designed to complement broad SAST tools like Semgrep and CodeQL - not replace them.

An MCP server that exposes tools for issuing scoped agent credentials, delegating narrower child credentials, handling approvals, revoking task trees, and retrieving audit trails and evidence packets.

Self-hostable remote terminal assistance over MCP. Agents create one-command connection invitations, execute commands, and manage interactive sessions on user-authorized macOS, Linux, and Windows computers without requiring an SSH daemon.

An MCP server that gives AI agents persistent, narrative memory: concepts as nodes, relationships as typed "because" edges, so anything filed can be pulled back by association rather than by address.

Radar is an open-source Kubernetes observability and diagnostics MCP server. It exposes cluster health, workload diagnosis, logs, events, topology, audit findings, and remediation actions to AI agents through the Model Context Protocol.

Local-first Microsoft Outlook MCP server: a single Go binary that manages calendar events and mail through the Microsoft Graph API over stdio, with tokens stored in the OS keychain and no Entra ID app registration required. Exposes four aggregate tools (calendar, mail, account, system) dispatched by an operation verb, with multi-account support and read-only and mail-gating modes.

Zabbix MCP server and CLI in one Go binary. 15 task-shaped tools: current problems, host investigation, why an alert did or did not arrive, metrics, maintenance. Zabbix 6.4+.

Local, searchable project memory for AI coding agents. Markdown source of truth, MCP interface, safe structured updates

Local-first Git hosting for AI coding agents. lgh serve turns any directory into an HTTP Git remote (127.0.0.1:9418) with push events, commit-status reporting, smart .gitignore generation, secret/large-file detection, and optional LAN sharing with auth. The MCP server exposes 10 tools covering repo registration, one-command backup (lgh up), server control, and event access.

MCP server that exposes any CashPilot instance to LLMs, enabling monitoring of passive income earnings, managing bandwidth-sharing services, and controlling fleet workers

A wallet for AI agents: test funds, payments, paid APIs and escrow on Aether. Give an AI agent its own wallet on Aether, a proof-of-work chain with post-quantum (ML-DSA-44) signatures. The agent gets an address and testnet funds in one step, then sends and receives AETH or USDC under per-payment and daily limits you set. It can pay for APIs that answer HTTP 402, sell its own, rate the services it

An MCP server and an agent skill for imagor, a fast, secure image processing server. An agent writes a layout (OG cards, product grids, quotes, testimonials) and it compiles to one imagor URL, served from your own instance.

An MCP server for Everstake's non-custodial staking data across 130+ networks: live APY, uptime metrics, rewards calculator, integrations, security and compliance. Built for asset managers, custodians, and exchanges evaluating institutional staking.

Operations toolchain for SQLite, Cloudflare D1, and Turso. Every command is available as both a CLI and an MCP tool: inspect, diff, migrate, monitor, back up, and repair databases. 22 stdio tools, read-only by default.