Pentest MCP

by DMontgomery40• 150•• Scanned•Claim this listing•Request removal
Security & Testingcybersecuritydirbustergobusterhashcathttp streaming

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.

Pentest MCP is an open-source mcp server by DMontgomery40, written mainly in TypeScript, with 150 GitHub stars and the AGPL-3.0 license. Its code was last updated Oct 30, 2026. The latest npm release is pentest-mcp 0.9.0, published Feb 18, 2026, with 160 downloads last week.

Scan summary: scanned Nov 5, 2026 at commit 88984ab. No capabilities flagged by our checks. Scan policy

aboutREADMEsecurityreviews

What Pentest MCP can touch

  • Run shell commandsNot seen in this scan
  • Run dynamic codeNot seen in this scan
  • Read or write filesNot seen in this scan
  • Read environment and secretsNot seen in this scan
  • Control a web browserNot seen in this scan
  • Connect to databasesNot seen in this scan
  • Read or send messagesNot seen in this scan
  • Touch money or tradingNot seen in this scan
  • Connect to the internetNo connections seen while running

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 88984ab, Nov 5, 2026. See the scan policy.

Before you install Pentest MCP

AgenticMart scanned Pentest MCP on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What it can access

  • An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.

Before you install

  1. Pin the version you reviewed instead of always installing the latest release.
  2. Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
  • Maintained by DMontgomery40 on GitHub, 150 stars and 29 forks. Popularity is not proof of safety.
  • Last code change: Oct 30, 2026.
  • Open-source license: AGPL-3.0.
Read the scan reportWhat our scan checks

Tools Pentest MCP exposes (36)

Listed by the server itself during our scan of commit 88984ab.

  • getRuntimeStatus

    Read installed tool capabilities and execution policy without launching assessments.

  • createEngagement

    Create an explicitly authorized, time bounded engagement with allowed and excluded targets.

  • getEngagement

    Read the scope and status of an engagement owned by this operator.

  • listEngagements

    List engagements belonging to the authenticated operator.

  • closeEngagement

    Close an owned engagement and cancel its active assessment commands.

  • nmapScan

    Run an Nmap scan to discover hosts and services. Use this before other tools to identify attack surface. Options map directly to Nmap flags. Note that SYN scans or OS detection (e.g. `-sS`, `-O`) require elevated privileges. Example: `{"target":"192.168.1.0/24", "scanTechnique":"SYN", "serviceVersio

  • generateWordlist

    Generate a custom password wordlist from target-related words. Use this before running John the Ripper. Example: `{"baseWords":["Acme","Smith"],"dates":["1984"],"customPatterns":["!"]}`

  • runJohnTheRipper

    Crack supplied hashes in an active local engagement. Only format and approved wordlist options are permitted; code, configuration and output overrides are disabled.

  • runHashcat

    Crack supplied hashes in an active local engagement using typed parameters and approved input files. Sessions, restore, loopback and caller output paths are disabled.

  • listActiveScans

    List running scans owned by this operator within the specified engagement.

  • cancelScan

    Stop an Nmap scan listed by listActiveScans for this engagement.

  • saveAssessmentPlan

    Save the operator approved assessment plan and exact tool allowlist for this engagement.

  • getAssessmentPlan

    Read the current operator approved assessment plan for this owned engagement.

  • listAgentProfiles

    List operator configured model profiles available for an approved assessment.

  • runAgentAssessment

    Run an operator approved assessment plan within its engagement scope and tool allowlist.

  • reconcileAgentAssessment

    Reconcile a previously started assessment run owned by this operator.

  • recordResearchActivity

    Record research evidence or an analyst verified finding for an owned engagement.

  • draftAssessmentReport

    Draft a report from recorded assessment evidence for operator review.

  • listAgentReportDrafts

    List report drafts for an engagement owned by this operator.

  • getAgentReportDraft

    Read a report draft within an engagement owned by this operator.

  • publishAgentReport

    Publish an analyst reviewed report draft into the engagement report store.

  • listEngagementRecords

    List captured engagement records so reports can be assembled without manual copy/paste.

  • getEngagementRecord

    Fetch a single engagement record by ID.

  • createClientReport

    Create an analyst reviewed client report from evidence in an owned engagement.

  • listClientReports

    List stored client reports belonging to this operator.

  • getClientReport

    Read a stored client report belonging to this operator.

  • gobuster

    Enumerate hidden directories and files on a web server. Run this after confirming the target hosts a web service. Provide a wordlist and optional extensions. Example: `{"target":"http://example.com", "wordlist":"/usr/share/wordlists/common.txt"}`

  • nikto

    Scan a web server for common vulnerabilities with Nikto. Use after identifying a live site. Some checks may be noisy. Example: `{"target":"http://192.168.1.10", "ssl":true, "port":"443"}`

  • subfinderEnum

    Enumerate subdomains for a target domain using subfinder.

  • httpxProbe

    Probe hosts with httpx and return live web endpoints.

  • ffufScan

    Run ffuf for web content discovery and fuzzing.

  • nucleiScan

    Run nuclei template scanning against target endpoints.

  • trafficCapture

    Capture traffic packets for reconnaissance/evidence collection.

  • hydraBruteforce

    Run brute-force authentication checks with Hydra.

  • privEscAudit

    Run local privilege-escalation audit checks and summarize potential escalation paths.

  • extractionSweep

    Run SQL injection extraction workflow with sqlmap.

Pentest MCP is an open-source mcp server by DMontgomery40, written mainly in TypeScript. NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.

At a glance

Stars
150
Forks
29
Language
TypeScript
License
AGPL-3.0
Created
Apr 2025
Last update
Oct 30, 2026
Type
MCP Server
Price
Free

Topics

cybersecuritydirbustergobusterhashcathttp-streamingjohn-the-ripperjtrmcpmcp-servermodel-context-protocolniktonmappentestingpentesting-toolsredteamsse-serversse-streamingstdio

Questions about Pentest MCP

What is Pentest MCP?

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.

Who maintains Pentest MCP?

Pentest MCP is maintained by DMontgomery40 on GitHub (DMontgomery40/pentest-mcp). AgenticMart lists it from public repository data.

Is Pentest MCP safe to use?

AgenticMart scanned Pentest MCP on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What license does Pentest MCP use?

It is published under the AGPL-3.0 license.

Pentest MCP alternatives

View more →

Similar mcp servers in Security & Testing, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Pentest MCP (this page)
DMontgomery40
150AGPL-3.0Oct 30, 2026Scanned, no flagged issues
Hexstrike AI
0x4m4
13kMITAug 3, 2026Scanned, no flagged issues
Viper
FunnyWolf
5.3kNone foundMay 31, 2026Not scanned yet
Open Ontologies
fabio-rovai
2.7kMITOct 30, 2026Scanned, no flagged issues
Qu1cksc0pe
CYB3RMX
2.1kGPL-3.0Sep 18, 2026Scanned, no flagged issues
Cve MCP Server
mukul975
1.7kApache-2.0Oct 1, 2026Scanned, no flagged issues