- Conduid
- Marketplace
- #penetration-testing
MCP servers tagged penetration-testing
126 live MCP servers tagged "penetration-testing", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with penetration-testing.
Claude C2
AI-Powered Command & Control Framework using Claude's Model Context Protocol (MCP)
PENTEST MCP SERVER
AI-powered security testing for Claude Desktop. MCP server integrating 6 essential pentesting tools (nmap, nikto, sqlmap, wpscan, dirb, searchsploit) in a secure Kali Linux Docker…
Curl MCP
MCP server that translates natural language instructions into curl commands, supporting both English and Spanish
Firebreak
Security MCP server that turns your AI into a penetration tester. 20 tools, 100 best practice guides, 47 vulnerability patterns. Connect to Claude, Cursor, or any MCP client.
Tinybrain
LLM local persistent storage for security nerds
Burp MCP
Burp Suite MCP server with 40+ tools for authorized web security testing
Firebreak
Security MCP server that turns your AI into a penetration tester. 20 tools, 100 best practice guides, 47 vulnerability patterns. Connect to Claude, Cursor, or any MCP client.
ROEGATE
The first reference monitor for autonomous AI penetration testing agents. Mandatory enforcement, not prompt-based guardrails. Patent pending.
Kali MCP Server
A secure, containerized Model Context Protocol (MCP) server that bridges any MCP-compatible client with a full-featured Kali Linux environment for authorized security auditing.
Supabase Security MCP
MCP server for Supabase security: audit, apply fixes, re-audit from any MCP client (Claude Code, Cursor, Cline).
BadHost CVE 2026 48710 Exploit
Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI
Hugin
A power tool for web security testing — scanner, repeater, intruder, and AI agent in one Rust binary. No accounts, no telemetry, no cloud.
Kali MCP
Run Kali Linux in Docker with MCP tools for AI assistants to start containers, execute commands, and manage security workflows
Aircrack MCP
MCP server that wraps aircrack-ng, enabling AI assistants to run and automate WiFi security assessments (scanning, handshake capture, cracking) for authorized penetration testing.
Kali MCP
Kali Linux container exposed to AI agents via MCP, behind a gateway with a network kill-switch
Claude Code Termux
Run Claude Code natively on Android with Termux using the official Linux binary. No root or proot required.
Yorishiro Proxy
AI-native MITM proxy — MCP server for traffic interception, recording & replay
Thru Burp
A cross-platform desktop UI MCP client specifically for proxying MCP traffic through Burp Suite Proxy. Useful for recon and fuzzing when pentesting a remote MCP HTTP server.
Shannon On Claude Code
Shannon's 5-phase pentest pipeline running natively in Claude Code — no Docker, no Temporal, just /pentest https://github.com/KeygraphHQ/shannon
Prompt Injection MCP
MCP Server for authorized AI security research and penetration testing (Educational purposes only - requires explicit authorization)
Securing MCP Servers
Notes and exercises for the O'Reilly live course: Securing MCP Servers — exploitation and defense of Model Context Protocol implementations.
Gemini Vuln Scanner
Vulnerability Scanning and Reconnaissance App with Gemini integrated workflow
Decoy Redteam
Autonomous red team for MCP servers. Sends adversarial payloads to your tools, proves exploitation, reports what's broken. 53 attack patterns across 6 categories. Zero dependencie…
Nsauditor AI
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.…
Cybersec Toolkit
580+ cybersecurity tools, one command. Modular bash installer for Linux & Termux with 14 profiles, 18 modules, and an MCP server for AI-assisted ethical hacking.
Frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
BurpMcpEnhance
Enhanced Burp Suite MCP Server — Streamable HTTP solves AI disconnection; SQLite cache prevents Burp freezing under load.Burp Suite MCP Server 增强版 — Streamable HTTP 彻底解决AI断连，SQLit…
Secpluger
AI-powered pentesting automation with MCP integration for Claude Code - parallel scanning, OWASP ASVS 5.0, workflow recording/replay
Pentest Autopilot Mcps
Professional MCP servers for penetration testing automation - SQLi, Exploit, Auth, Recon
Hopper Recon
Self-hosted attack-surface recon — point it at a domain you own and map subdomains, DNS, TLS, HTTP, CDN, and historical URLs in one dashboard. The same tools run over MCP, so AI a…
Pentos
Wissensgetriebener, lokaler Pentest-Workspace (CLI) für CTF, Bug Bounty & autorisierte Tests – geführte Recon, Findings/Loot/Reports, Web-Dashboard, lokale KI-Unterstützung & MCP-…
Pentest MCP Toolkit
Pentest MCP Toolkit: 50 Kali Linux security tools exposed as one MCP server over Docker stdio, built to be driven 100% by AI agents (Claude Code, Codex). For authorized pentests o…
Pengstrike MCP
AI-Powered MCP Penetration Testing Framework - 150+ security tools with adaptive task model
Security Hunter MCP
🛡️ Production-grade Model Context Protocol (MCP) Server for Autonomous AI Security Bug Hunting, Persistent Pentest Memory, Dynamic Checklists, Secret Redaction, and Exploit PoC Ge…
Onsecurity MCP Server
An MCP server for the OnSecurity API that allows Claude to query Rounds, Findings, Prerequisites, Blocks and Notifications.
Crt.sh Skills
Comprehensive crt.sh wrapper: Skills · MCP Server · CLI · Go SDK — search CT logs, retrieve certs, investigate CAs, lint certificates, monitor Atom feeds. Every crt.sh feature wra…
Hacking Cockpit Lite
Ringan, single-file MCP Server untuk pentesting dengan fitur rare: parallel recon, findings DB + compliance auto-tag (OWASP/PCI/CWE), intel correlation, attack-path analyzer, scan…
Hermes Pentest Lab
AI-orchestrated, Kali-native pentesting lab: an MCP tool-server with scope/VPN/rate/audit enforced in code, independent finding verification, MITRE ATT&CK + OWASP mapping, a reusa…
Mobix
Authorized Android pentest lab, drivable by hand or by AI — Frida bypass chain, live traffic capture with automatic IDOR flagging, full MCP control plane, web dashboard.
Nsauditor AI Agent Skill
AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows. Works with Claude Code, Cu…
Marq
Universal cyber assistant: ~80 audited Kali tools + an expert skills library, driven by any model over MCP or direct run
Appwrite Security MCP
MCP server for Appwrite security audits inside Claude Code, Cursor, Cline.
SleepyWalker
🛡️ Autonomous SQL injection pipeline — crawls, probes, confirms with AI, exploits with sqlmap, reports in HTML/JSON/SARIF. Built for authorized red teams. One command, full databa…
CyberAI
AI-powered pentest platform
Hacking The LLM AI Goat Red Team
Red teaming AI Goat™ to explore OWASP Top 10 for LLM Applications (2025), prompt injection, RAG poisoning, MCP-assisted auditing, and AI security vulnerabilities.
Agent Smiths
MCP-based autonomous security agent with LLM-powered analysis, multi-tool orchestration, and automated reporting
Stratos MCP
Stratos - Azure Security Assessment MCP Server with 32 professional security tools
AI Pentest Agent
基于 LLM Agent + MCP 的自动化安全侦察框架：自然语言驱动 nmap / subfinder / httpx，完成子域枚举 → Web 探测 → 端口扫描 → 中文报告闭环（仅限已授权场景，只做侦察不做利用）
Dsh Pentest Bugtrace
BugTraceAI penetration-testing mode for deepseek-harness (dsh): pentester persona, runbook skill, and MCP bridge in one installable bundle
YeepForge
Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP serv…