DMontgomery40/pentest-mcp
NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.
Implements bearer-token OIDC authentication with JWKS validation and token introspection, plus a structured engagement-record system that auto-captures invocation metadata to streamline report generation from tool outputs. Supports three network transports (stdio/HTTP/SSE) with HTTP as the modern default, and includes a bundled MCP Inspector launcher for immediate debugging without separate installation.
126 stars. Available on npm.
Stars
126
Forks
27
Language
JavaScript
License
MIT
Category
Last pushed
Feb 19, 2026
Commits (30d)
0
Dependencies
7
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/mcp/DMontgomery40/pentest-mcp"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Compare
Related servers
0x4m4/hexstrike-ai
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot,...
panther-labs/mcp-panther
Write detections, investigate alerts, and query logs from your favorite AI agents
duriantaco/skylos
High-precision Python SAST & Dead Code Remover. Finds unused functions, secrets, and security...
msaad00/agent-bom
Security scanner for AI infrastructure — CVEs, blast radius, credential exposure, runtime...
Wh0am123/MCP-Kali-Server
MCP configuration to connect AI agent to a Linux machine.