1. Conduid
  2. Blockchain
  3. io.github.cyanheads/pentest-mcp-server
MCP server · Blockchain

io.github.cyanheads/pentest-mcp-server

by · github.com/cyanheads/pentest-mcp-server

Offline methodology engine for authorized penetration testing, CTF, and security research.

Unclaimed blockchain
InstallView source
37Low

Scored 4 months ago · breakdown

About io.github.cyanheads/pentest-mcp-server

io.github.cyanheads/pentest-mcp-server is an MCP server published by cyanheads in the Blockchain category: offline methodology engine for authorized penetration testing, CTF, and security research.

The repository has 1 stars and 1 forks, with the last commit 5 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add io-github-cyanheads-pentest-mcp-server -- npx -y @cyanheads/pentest-mcp-server
npx
npx -y @cyanheads/pentest-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (7)

pentest_analyze_responseAnalyzes a raw server response (headers + body) from authorized probing for information leakage, fingerprinting signals, and exploitation opportunities — each finding paired with remediation.

Parameters not published.

pentest_encodeApplies an encoding chain to a payload string (URL, double-URL, HTML entity, Unicode, hex, Base64, and more). Returns step-by-step decode explanation and bypass rationale.

Parameters not published.

pentest_generate_payloadsGenerates annotated payload templates for authorized testing. Each template includes why it works in the injection context, detection signatures, and mitigations.

Parameters not published.

pentest_guideReturns a step-by-step methodology playbook for the given attack vector, scoped to authorized testing. Each phase covers what to look for, tools, detection indicators for defenders, and mitigations.

Parameters not published.

pentest_lookup_groupLooks up a MITRE ATT&CK threat group or software entry by ID or name. Returns aliases, type (group vs. software), description, and the techniques it uses with procedure context.

Parameters not published.

pentest_lookup_techniqueLooks up a MITRE ATT&CK technique by ID or keyword. Returns description, tactics, detection data sources, behavioral indicators, mitigations, and real-world procedure examples.

Parameters not published.

pentest_map_techniquesGiven a target profile (stack, services, auth type, OS), returns ranked ATT&CK techniques and OWASP test cases most relevant to that authorized engagement.

Parameters not published.

Ask AI

✦

Ask AI about io.github.cyanheads/pentest-mcp-server

Powered by Claude · Grounded in docs

I know everything about io.github.cyanheads/pentest-mcp-server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About io.github.cyanheads/pentest-mcp-server

How do I install io.github.cyanheads/pentest-mcp-server?

Run claude mcp add io-github-cyanheads-pentest-mcp-server -- npx -y @cyanheads/pentest-mcp-server, then add the server to your MCP client's configuration.

Is io.github.cyanheads/pentest-mcp-server safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is io.github.cyanheads/pentest-mcp-server still maintained?

Yes — the last commit was 5 days ago. The repository has 1 stars and 1 forks.