Pentest MCP
An AI-powered penetration testing server that integrates over 30 security tools with Groq LLM analysis for automated vulnerability scanning, triage, and reporting. It enables users to perform comprehensive security assessments through natural languag
What is Pentest MCP?
Pentest MCP is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to ai-powered penetration testing server that integrates over 30 security tools with groq llm analysis for automated vulnerability scanning, triage, and reporting. it enables users to perform comprehensi...
An AI-powered penetration testing server that integrates over 30 security tools with Groq LLM analysis for automated vulnerability scanning, triage, and reporting. It enables users to perform comprehensive security assessments through natural languag
This server falls under the Security category on MCPgee, the world's largest MCP server directory with 33,000+ servers.
Features
- An AI-powered penetration testing server that integrates ove
Use Cases
Maintainer
Works with
Installation
Manual Installation
npx pentest-mcp-serverConfiguration
Configuration Details
claude_desktop_config.json
Performance
Response Metrics
Resource Usage
How to Set Up and Use Pentest MCP
The Pentest MCP Server is an AI-powered penetration testing platform that connects security tools running on a remote Kali Linux or Parrot OS system to your AI assistant via MCP. It manages persistent tmux sessions over SSH, enabling long-running interactive workflows with tools like nmap, Metasploit, sqlmap, hydra, gobuster, and nikto. Natural language commands are translated into security tool invocations, with output parsing and session lifecycle management handled by the server — making it suitable for automated vulnerability scanning and reporting workflows.
Prerequisites
- Python 3.8 or later on the machine running the MCP server
- A reachable Kali Linux or Parrot OS system (local VM or remote) with SSH access
- tmux installed on the target pentesting system
- Security tools installed on the target (nmap, masscan, gobuster, nikto, Metasploit, sqlmap, hydra, etc.)
- An MCP-enabled client such as Claude Desktop
Clone the repository and install Python dependencies
Clone the project and install it in editable mode with pip so all dependencies are available.
git clone https://github.com/LayeSec006/pentest-mcp-server.git
cd pentest-mcp-server
pip install -e .Configure environment variables
Copy the example .env file and fill in the SSH connection details for your pentesting system. All TARGET_* variables are required.
cp .env.example .env
# Edit .env and set:
# TARGET_HOST=192.168.1.100
# TARGET_PORT=22
# TARGET_USER=kali
# TARGET_PASSWORD=yourpassword
# TARGET_SSH_KEY=/path/to/private/key (alternative to password)Install tmux on the target system
The server requires tmux on the target machine to manage persistent sessions. Install it via the target system's package manager.
# On Kali Linux or Debian-based:
sudo apt-get install -y tmux
# On Parrot OS:
sudo apt-get install -y tmuxRun the test suite to verify setup
Run the included tests to confirm the server can connect to the target and that tool imports are working correctly.
python -m pytest tests/ -vAdd the server to your MCP client configuration
Configure your MCP client to launch the pentest server. The server reads SSH credentials from the .env file in its working directory.
{
"mcpServers": {
"pentest": {
"command": "python",
"args": ["-m", "pentest_mcp_server"],
"cwd": "/path/to/pentest-mcp-server"
}
}
}Pentest MCP Examples
Client configuration
MCP client config pointing to the installed pentest server. The server reads SSH credentials from the .env file in the cwd directory.
{
"mcpServers": {
"pentest": {
"command": "python",
"args": ["-m", "pentest_mcp_server"],
"cwd": "/path/to/pentest-mcp-server",
"env": {
"TARGET_HOST": "192.168.1.100",
"TARGET_PORT": "22",
"TARGET_USER": "kali",
"TARGET_PASSWORD": "yourpassword"
}
}
}
}Prompts to try
Example security assessment prompts. Only use against systems you own or have explicit written authorization to test.
- "Create a session and run an nmap service scan against 192.168.1.0/24"
- "Use gobuster to enumerate directories on http://192.168.1.50 with the common.txt wordlist"
- "Start a Metasploit session and search for EternalBlue exploits"
- "Run sqlmap against http://192.168.1.50/login.php and check for SQL injection"
- "Show the output from the last nmap scan and summarize open ports"Troubleshooting Pentest MCP
SSH connection refused or authentication failure
Verify TARGET_HOST, TARGET_PORT, TARGET_USER, and TARGET_PASSWORD (or TARGET_SSH_KEY) in your .env file. Test with a direct SSH command: 'ssh -p TARGET_PORT TARGET_USER@TARGET_HOST'. Make sure the SSH service is running on the target.
tmux: command not found on the target system
SSH into the target machine and install tmux: 'sudo apt-get install -y tmux'. The server requires tmux for persistent session management and will fail to create sessions without it.
Security tools not found when executing commands
Ensure the required tools (nmap, gobuster, nikto, etc.) are installed on the TARGET system, not on the machine running the MCP server. On Kali Linux most tools are pre-installed; on other systems install them individually.
Frequently Asked Questions about Pentest MCP
What is Pentest MCP?
Pentest MCP is a Model Context Protocol (MCP) server that ai-powered penetration testing server that integrates over 30 security tools with groq llm analysis for automated vulnerability scanning, triage, and reporting. it enables users to perform comprehensive security assessments through natural languag It connects AI assistants to external tools and data sources through a standardized interface.
How do I install Pentest MCP?
Follow the installation instructions on the Pentest MCP GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.
Which AI clients work with Pentest MCP?
Pentest MCP works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.
Is Pentest MCP free to use?
Yes, Pentest MCP is open source and available under the MIT License license. You can use it freely in both personal and commercial projects.
Pentest MCP Alternatives — Similar Security Servers
Looking for alternatives to Pentest MCP? Here are other popular security servers you can use with Claude, Cursor, and VS Code.
Casdoor
★ 13.6kAn open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
ghidraMCP
★ 9.0kAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through
HexStrike AI
★ 8.9kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly b
IDA Pro MCP
★ 8.7kEnables AI-assisted reverse engineering in IDA Pro by providing tools to analyze binaries, decompile functions, manage comments, search patterns, and interact with the IDA database through natural language.
Anthropic Cybersecurity Skills
★ 6.6k754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platform
Hooker
★ 5.1k🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL u
Browse More Security MCP Servers
Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.
Set Up Pentest MCP in Your Editor
Choose your AI client for step-by-step setup instructions.
Quick Config Preview
Add this to your claude_desktop_config.json or .cursor/mcp.json
Ready to use Pentest MCP?
Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.