pentestMCP: AI-Powered Penetration Testing via MCP, an MCP designed for penetration testers

by RamKansal · MCP Server · ★ 105

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install pentestMCP

docker pull ramgameer/pentest-mcp:latest
git clone https://github.com/ramkansal/pentestMCP.git

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: SAFE · quality 68/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

cybersecuritymcpmcp-clientmcp-serverpython

Quick Facts

Stars105
Forks22
LanguagePython
CategoryMCP Server
Quality Score68/100
Open Issues1
Last Updated2026-09-25
Created2025-04-29
Platformscli, mcp, python
Est. Tokens~16k

About pentestMCP

pentestMCP: AI-Powered Penetration Testing via MCP pentestMCP provides a powerful bridge between Large Language Models (LLMs) and practical penetration testing tools through the Model Context Protocol (MCP). This project functions as an MCP Server, exposing a curated suite of over 20 standard security assessment utilities (Nmap, Nuclei, ZAP, SQLMap, etc.) as callable 'tools'.

Compatible Skills

These tools work well together with pentestMCP for enhanced workflows:

  • pentest-skills — semantic(0.24)+complementary+rare_topics+same_lang+similar_pop+shared_platform (58%)
  • Anthropic-Cybersecurity-Skills — semantic(0.18)+complementary+rare_topics+same_lang+similar_pop+shared_platform (56%)
  • EVA — semantic(0.16)+complementary+rare_topics+same_lang+similar_pop+shared_platform (55%)
  • watchtower — semantic(0.25)+complementary+same_lang+similar_pop+shared_platform (54%)

pentestMCP alternative? Top 6 similar tools

Looking for a pentestMCP alternative? If you're comparing pentestMCP with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • mcpstore by whillhill · ⭐ 427

    开盒即用的优雅管理mcp服务 | 结合Agent框架 | 作者听劝 | 已发布pypi | Vue页面demo

  • mcp-gateway by lasso-security · ⭐ 388

    A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade ag

  • Wazuh-MCP-Server by gensecaihq · ⭐ 246

    Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability

  • mcp-python-interpreter by yzfly · ⭐ 104

    MCP Python Interpreter: run python code. Python-mcp-server, mcp-python-server, Code Executor

  • agent by 1mcp-app · ⭐ 523

    A unified Model Context Protocol server implementation that aggregates multiple MCP servers into one.

  • roam-code by Cranot · ⭐ 517

    Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 287 comman

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Python Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools