Related MCP Server Resources

Explore more AI models, providers, and integration options:

  • Explore AI Models
  • Explore AI Providers
  • Explore MCP Servers
  • LangDB Pricing
  • Documentation
  • AI Industry Blog
  • Phrases MCP Server
  • Neo N3 MCP Server
  • Kintone MCP Server
  • Xano MCP Server for Smithery
  • Snyk MCP Server
Back to MCP Servers
Pentest Tools MCP Server

Pentest Tools MCP Server

Public
ch1nhpd/Pentest-Tools-MCP-Server

An MCP (Model Context Protocol) server offering comprehensive penetration testing capabilities including directory and vulnerability scanning, API testing, reconnaissance, automated report generation, and seamless integration with LLM clients like Claude Desktop.

python
0 tools
May 30, 2025
Updated Jun 4, 2025

Supercharge Your AI with Pentest Tools MCP Server

MCP Server

Unlock the full potential of Pentest Tools MCP Server through LangDB's AI Gateway. Get enterprise-grade security, analytics, and seamless integration with zero configuration.

Unified API Access
Complete Tracing
Instant Setup
Get Started Now

Free tier available • No credit card required

Instant Setup
99.9% Uptime
10,000+Monthly Requests

Pentest Tools MCP Server

An MCP (Model Context Protocol) server for penetration testing tools, designed to work with various LLM clients like Claude Desktop, Roo Code, and other compatible MCP clients.

Features

  • Comprehensive pentesting tools:
    • Directory scanning (FFuf, Dirsearch)
    • Vulnerability scanning (Nuclei, XSStrike)
    • API testing
    • Reconnaissance
    • And more...
  • Pre-configured wordlists from SecLists
  • Automated report generation
  • Claude Desktop integration

Prerequisites

  • Docker and Docker Compose (for containerized setup)
  • Claude Desktop application or other MCP-compatible client
  • Python 3.10+ and uv (for local setup)

Directory Setup

  1. Create the required directories:
# Create directories mkdir -p reports templates wordlists
  1. Directory structure should look like this:
pentest-tools/
├── reports/          # For storing scan reports
├── templates/        # For report templates
├── wordlists/        # For custom wordlists
├── pentest-tools-mcp-server.py
├── config.json
├── requirements.txt
├── docker-compose.yml
└── Dockerfile

Setup

Docker Setup (Recommended)

  1. Build and start the container:
docker-compose up -d --build
  1. Verify the container is running:
docker-compose ps
  1. Check logs if needed:
docker-compose logs -f

Local Setup

  1. Install dependencies:
uv venv source .venv/bin/activate # On Windows: .venv\Scripts\activate uv pip install -r requirements.txt
  1. Install required system tools (example for Ubuntu/Debian):
sudo apt-get install nmap whatweb dnsrecon theharvester ffuf dirsearch sqlmap

Claude Desktop Integration

  1. Configure Claude Desktop:

Windows:

%APPDATA%\Claude\claude_desktop_config.json

MacOS/Linux:

~/Library/Application Support/Claude/claude_desktop_config.json
  1. Add server configuration:

For Docker setup:

{ "mcpServers": { "pentest-tools": { "command": "docker-compose", "args": [ "run", "--rm", "pentest-tools", "python3", "pentest-tools-mcp-server.py" ], "cwd": "\\Path\\to\\pentest-tools" } } }

If the above configuration doesn't work on Windows, try this alternative approach:

{ "mcpServers": { "pentest-tools": { "command": "cmd", "args": [ "/c", "cd /d \\path\\to\\pentest-tools && docker-compose run --rm pentest-tools python3 pentest-tools-mcp-server.py" ] } } }

Note about cwd (Current Working Directory):

  • cwd tells Claude Desktop which directory to run the command from
  • It must be the absolute path to the directory containing docker-compose.yml
  • On Windows, use double backslashes (\\) in paths
  • On Linux/MacOS, use forward slashes (/)
  1. Restart Claude Desktop

Usage

Available commands in Claude Desktop:

  1. Reconnaissance:
/recon example.com
  1. Directory scanning:
/scan example.com --type directory
  1. Vulnerability scanning:
/scan example.com --type full
/scan example.com --type xss
/scan example.com --type sqli
/scan example.com --type ssrf
  1. API testing:
/scan api.example.com --type api

Natural language commands:

  • "Run a full security scan on example.com"
  • "Check for XSS vulnerabilities on example.com"
  • "Perform reconnaissance on example.com"

Directory Structure Details

pentest-tools/
├── reports/            # Scan reports directory
│   ├── recon/         # Reconnaissance reports
│   ├── vulns/         # Vulnerability scan reports
│   └── api/           # API testing reports
├── templates/          # Report templates
│   ├── recon.html     # Template for recon reports
│   ├── vuln.html      # Template for vulnerability reports
│   └── api.html       # Template for API test reports
├── wordlists/         # Custom wordlists
│   ├── SecLists/     # Cloned from SecLists repo
│   ├── custom/       # Your custom wordlists
│   └── generated/    # Tool-generated wordlists
├── pentest-tools-mcp-server.py # Main MCP server
├── config.json        # Tool configuration
├── requirements.txt   # Python dependencies
├── docker-compose.yml # Docker configuration
└── Dockerfile        # Container definition

Security Notes

  • Always ensure you have permission to scan targets
  • Keep tools and dependencies updated
  • Review scan results carefully
  • Follow responsible disclosure practices
Publicly Shared Threads0

Discover shared experiences

Shared threads will appear here, showcasing real-world applications and insights from the community. Check back soon for updates!

Share your threads to help others
Related MCPs5
  • Phrases MCP Server
    Phrases MCP Server

    Efficient MCP (Model Context Protocol) server for managing inspirational phrases with full CRUD capa...

    6 tools
    Added May 30, 2025
  • Neo N3 MCP Server
    Neo N3 MCP Server

    Production-ready Model Context Protocol server offering seamless Neo N3 blockchain integration with ...

    Added May 30, 2025
  • Kintone MCP Server
    Kintone MCP Server

    Enables seamless integration with kintone via Model Context Protocol, offering comprehensive capabil...

    25 tools
    Added May 30, 2025
  • Xano MCP Server for Smithery
    Xano MCP Server for Smithery

    Model Context Protocol server enabling seamless integration between Claude AI and Xano databases wit...

    Added May 30, 2025
  • Snyk MCP Server
    Snyk MCP Server

    Standalone Model Context Protocol server enabling security vulnerability scanning of GitHub/GitLab r...

    Added May 30, 2025