Professional pentest MCP server with stdio + Streamable HTTP transports, bundled MCP Inspector launcher, bearer auth, SoW-aware reporting, and modern
Professional pentest MCP server with stdio + Streamable HTTP transports, bundled MCP Inspector launcher, bearer auth, SoW-aware reporting, and modern tooling across
Professional penetration-testing MCP server with modern transport/auth support and expanded recon tooling.
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| nmapScan | runJohnTheRipper |
| runHashcat | gobuster |
| nikto | subfinderEnum |
| httpxProbe | ffufScan |
| nucleiScan | trafficCapture |
| hydraBruteforce | privEscAudit |
| extractionSweep | generateWordlist |
| listEngagementRecords | getEngagementRecord |
| createClientReport | cancelScan |
{
"mcpServers": {
"pentest-1": {
"command": "npx",
"args": ["-y", "pentest-mcp"],
"env": {
"MCP_SERVER_HOST": "your-value",
"MCP_OIDC_JWKS_URL": "your-value",
"MCP_OIDC_INTROSPECTION_URL": "your-value",
"MCP_OAUTH_CLIENT_ID": "your-value",
"MCP_OAUTH_CLIENT_SECRET": "your-value",
"MCP_OAUTH_PROVIDER_URL": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| MCP_SERVER_HOST | Endpoint or connection string the server talks to. | Optional |
| MCP_OIDC_JWKS_URL | Endpoint or connection string the server talks to. | Yes |
| MCP_OIDC_INTROSPECTION_URL | Endpoint or connection string the server talks to. | Yes |
| MCP_OAUTH_CLIENT_ID | Configuration value read at startup. | Optional |
| MCP_OAUTH_CLIENT_SECRET | Credential the server authenticates with. | Yes |
| MCP_OAUTH_PROVIDER_URL | Endpoint or connection string the server talks to. | Yes |
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
Query Yandex Webmaster indexing, queries, diagnostics and backlinks, and recrawl, via an AI agent.
MCP server for PostgreSQL database operations - query, explore schemas, and analyze tables
MCP Tree Explorer returns a directory-tree view to an assistant through a small local Python stdio server.
🔗 Model Context Protocol (MCP) Server for retrieving saved articles from Pocket API and loading them into Claude