- Conduid
- Marketplace
- #penetration-testing
MCP servers tagged penetration-testing
126 live MCP servers tagged "penetration-testing", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with penetration-testing.
Offensive Sec MCP
offensive security ai mcp
CHAI
Cyber Host Artificial Intelligence (C.H.A.I) - mcp server
MCPhantom
MCPhantom is a local web dashboard for MCP endpoint recon. Discover resources, templates, tools, and prompts, then interact with them from a security console.
Hackmonty
Autonomous Sandbox Security Assessment
Pentool MCP Server
MCP (stdio JSON-RPC) server for Pentool AI — local LLM assistant for pentest: pick checks, bypass WAF, find endpoints. Made for DrXOps/pentool.
Burpsuite For AI Agent
Two-way Burp Suite MCP bridge for AI agents — capture traffic, queue scan tasks, send findings back to Burp as Scanner issues or Repeater tabs. MCP server + Jython plugin.
NeuralReaper
AI-powered penetration testing framework with 55+ MCP tools, CVE intelligence, Active Directory, and autonomous security workflows.
VulnClaw
Automate penetration testing workflows such as reconnaissance, vulnerability scanning, and exploitation using AI agents and the Model Context Protocol.
Yang Promptlab
AI security testing — find security vulnerabilities in LLM apps, chatbots, AI agents, MCP servers, and RAG systems. Mapped to OWASP (LLM, Agentic, MCP) and NIST AI RMF.
Ghostkit MCP
26 security tools for Claude, Cursor, and any MCP-compatible AI client. Powered by ghostkit.net.
Mcpsafe
The first MCP security framework that tests a live running server, not just static config. Runtime adversarial testing — prompt injection, fuzzing, load & concurrency, latency, au…
Nimbus MCP
Nimbus - AWS Security Assessment MCP Server | 45 Tools | Multi-Region Scanning | TRA Reports | CIS/NIST/PCI-DSS Compliance
Claude Code Map
Map Claude Code projects with a clear MCP-driven view of files, paths, and structure
Securityscan MCP
Security for AI agents: 8 MCP tools - config audits, secret redaction, skill vetting, network scans, agent-native checkout
AI Integration Health Check Demo
Demo repo for an AI/API integration health-check freelance service: IDOR/SQLi/secret-logging fixes side by side (broken vs main), zero-dependency idempotency example, audit report…
Firebase Security MCP
MCP server for Firebase Firestore Rules security audits inside Claude Code, Cursor, Cline.
Pocketbase Security MCP
MCP server for PocketBase security: audit collection rules, preview fixes from inside any MCP client.
Mobile Security Research Framework
Self-contained Mobile & IoT SAST/DAST/pentest toolkit: MobSF + Frida + objection + mitmproxy + rooted emulator, as a desktop app, CLI and MCP server.
Agentic Redteam Harness
A/B red-team harness for agentic AI: 34 OWASP-LLM / MITRE-ATLAS attacks fired at a multi-agent app with and without a control plane, plus a live malicious-MCP-server demo. Determi…
AI Vibe Check
🤖 Track developer mood swings with AI-generated insights. Get updates every 8 hours for a fun take on the tech community's emotional state.
Sec Responder MCP
MCP server for Responder - LLMNR/NBT-NS poisoner for authorized penetration testing
Hexstrike Docker MCP
Dockerized HexStrike AI on a linuxserver.io Kali base image, with a remote streamable-HTTP MCP server exposing 150+ offensive-security tools to MCP clients like Claude Code.
PacketForge
AI network analysis toolkit + MCP server for authorized pentesting: Wireshark/tshark capture, credential extraction, threat intel, Nmap scanning. | 面向授权渗透测试的 AI 网络分析工具库 + MCP Serv…
H Ploit
Autonomous multi-agent penetration testing framework — LangGraph + MCP + 14 specialized agents
Securing MCP Servers
Notes and exercises for the O'Reilly live course: Securing MCP Servers — exploitation and defense of Model Context Protocol implementations.
MCP
Local MCP server for NullReport: drive your self-hosted report generator from an AI client like Claude or Cursor.