PentestGPT MCP Server

This project is an advanced penetration testing tool based on the original "PentestGPT" paper. It extends the core capabilities by integrating with

Local serverstdioPython

What is the PentestGPT MCP Server?

This project is an advanced penetration testing tool based on the original "PentestGPT" paper. It extends the core capabilities by integrating with Model Context Protocol servers (MCPs) to perform automated, LLM-driven security assessments.

Key capabilities

  • Dynamic MCP Server Integration — Connects to various tool servers running locally or remotely via a flexible mcp_servers.json configuration file
  • Automated Task Execution (auto mode) — Automatically executes LLM-suggested tasks using tools provided by a connected MCP server
  • Interactive "Human-in-the-Loop" Mode — Supports user confirmation before each tool execution, enhancing safety and control during automated scans
  • Flexible Model Support — Works with a wide range of LLM providers, including OpenAI (GPT series) and Google (Gemini series)

Practical notes

  • Maintained by yuhano, written in Python.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Configuration

VariableDescriptionRequired
OPENAI_API_KEYCredential the server authenticates with.Yes
GOOGLE_API_KEYCredential the server authenticates with.Yes

Frequently asked questions

This project is an advanced penetration testing tool based on the original "PentestGPT" paper. It extends the core capabilities by integrating with Model Context Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.