Skip to main content
Glama
72,476 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"Penetration Testing" matching MCP servers:

  • Professional Penetration

    AnGrY-Althaf
    F
    license
    -
    quality
    D
    maintenance
    Provides access to over 40 industry-standard penetration testing tools, including Nmap, SQLMap, and Metasploit, within an isolated Kali Linux Docker container. It enables security professionals to perform comprehensive network reconnaissance, web application testing, and vulnerability research through natural language commands.

  • kali-mcp-server

    bsahane
    A
    license
    A
    quality
    C
    maintenance
    Enables MCP clients to drive Kali Linux ethical hacking tools for authorized penetration testing, with enforced engagement scope, exploitation gating, and full audit logging.
    24
    Apache 2.0

  • APVISO MCP Server

    Apviso
    A
    license
    A
    quality
    C
    maintenance
    Enables interaction with the APVISO AI-powered penetration testing platform to manage targets, initiate scans, and retrieve vulnerability findings. It allows developers to integrate security testing workflows directly into MCP-compatible tools like Claude Code and Cursor.
    18
    10
    MIT

  • Xploit47

    aloc999
    A
    license
    A
    quality
    B
    maintenance
    AI-powered penetration testing reasoning engine (MCP server) for attack path planning, step scoring, and tool recommendations using Beam Search and Monte Carlo Tree Search.
    1
    1
    MIT

  • Hercules MCP

    0xMihirK
    A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to perform professional penetration testing through a containerized Kali Linux environment, exposing industry-standard offensive security tools as structured MCP tools.
    45
    4
    MIT
  • operant-mcp by operantlabs

    operant-mcpofficial

    operantlabs
    A
    license
    A
    quality
    F
    maintenance
    A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
    51
    57
    23
    MIT

  • API Testing MCP

    cocaxcode
    A
    license
    A
    quality
    D
    maintenance
    A lightweight, local-first MCP server for executing HTTP requests and managing API collections and environments without cloud dependencies. It enables testing APIs, handling authentication, and importing OpenAPI specifications directly within MCP-compatible workflows.
    42
    194
    4
    MIT

  • Tengu

    rfunix
    A
    license
    A
    quality
    D
    maintenance
    Turns Claude into a penetration testing copilot with 80 security tools, safety controls, and automatic reporting.
    80
    58
    MIT

  • Reports MCP Server

    izzy0101010101
    F
    license
    A
    quality
    -
    maintenance
    Enables management of penetration testing reports and vulnerabilities through a REST API, supporting CVSS 3.1 scoring, HTML formatting, and secure JWT authentication for comprehensive security assessment documentation.
    9
    3

  • kali-mcp

    Neeraj829784
    F
    license
    B
    quality
    B
    maintenance
    Enables AI assistants to perform penetration testing by running real Kali Linux security tools and returning structured, verified findings instead of raw terminal output.
    100

  • Mythic MCP

    johanrobbenites
    F
    license
    B
    quality
    B
    maintenance
    Enables LLMs to perform automated penetration testing and Active Directory reconnaissance through Mythic, with tools for executing PowerShell, AD recon, domain user enumeration, and Kerberoasting.
    12

  • MCP Pentest

    adriyansyah-mf
    A
    license
    C
    quality
    D
    maintenance
    An automated penetration testing framework that enables intelligent security assessments through reconnaissance, vulnerability scanning, and controlled exploitation. Features AI-driven workflow management with comprehensive reporting for authorized security testing.
    27
    9
    7
    BSD 3-Clause