DMontgomery40 / pentest-mcp
NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.
Why this job: name: mcp; says: mcp server; topics: mcp-server, model-context-protocol, mcp
What it does
Pentest MCP is a TypeScript MCP server for authorized security assessments. It gives a human researcher or a tool-using assessment agent one scoped interface for discovery, validation, capture, credential checks, local audit, evidence retrieval, and report preparation. Each active tool call is tied to an engagement and a durable record. The server checks the declared targets and time window; the researcher verifies findings before publication.
Get started
npm install -g pentest-mcp
pentest-mcp- Maintenance
- Active
- Last commit 11 days ago
- Stars
- 150
- +1 this week
- Licence
- AGPL-3.0
- Share-alike, even hosted
- Downloads for
- None listed
- No release files
- Latest version
- None yet
- No releases
- Built with
- TypeScript
- 46% of the code
Is it looked after?
- Contributors
- 1
- Last 90 days
- Issues
- 100% closed
- 0 still open
- Pull requests
- 7 merged
- 0 waiting
- Releases
- None
- Never published
- No contributing guide
- No security policy
- No code of conduct
More: languages, topics and project record
Languages
- TypeScript 46%
- JavaScript 46%
- Vue 6%
- CSS 2%
Topics
- cybersecurity
- dirbuster
- gobuster
- hashcat
- http-streaming
- john-the-ripper
- jtr
- mcp
- mcp-server
- model-context-protocol
- nikto
- nmap
Project record
- JobMCP servers
- StatusListed
- Commits43
- Forks30
- Watching5
- Stars in 28 days+3
- CreatedApr 4, 2025
- First seen by usNov 7, 2026
- CheckedNov 7, 2026