AI Plugin Index
pentest-mcp-server
CommunityMCP server by cyanheads · updated · ★ 1 · 355 downloads a week
Offline methodology engine for authorized penetration testing, CTF, and security research. pentest-mcp-server is a community project by cyanheads, not verified by a company domain.
Last commit 3 days ago
Apache-2.0: permissive, fine for commercial use
Clear description, published package or server URL, original repository
Not checked yet. What we check
Install pentest-mcp-server
Built from the published package, never by AIclaude mcp add pentest-mcp-server -- npx -y @cyanheads/pentest-mcp-serverRun in your terminal. Add --scope user to use it in every project.
{
"mcpServers": {
"pentest-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/pentest-mcp-server"
]
}
}
}Settings, Developer, Edit config. Paste into claude_desktop_config.json and restart.
{
"mcpServers": {
"pentest-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/pentest-mcp-server"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project).
{
"servers": {
"pentest-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/pentest-mcp-server"
]
}
}
}Add to .vscode/mcp.json. VS Code uses "servers", not "mcpServers".
codex mcp add pentest-mcp-server -- npx -y @cyanheads/pentest-mcp-server{
"mcpServers": {
"pentest-mcp-server": {
"command": "npx",
"args": [
"-y",
"@cyanheads/pentest-mcp-server"
]
}
}
}Add to ~/.gemini/config/mcp_config.json (all projects) or .agents/mcp_config.json (this project).
gemini mcp add pentest-mcp-server npx -y @cyanheads/pentest-mcp-serverGemini CLI was replaced by Antigravity CLI in June 2026 and remains only for enterprise licences and paid API keys.
MCP servers run with your permissions and can read what you give them access to. Some need an API key: check the README and add it under env in the pentest-mcp-server block.
Alternatives to pentest-mcp-server
All alternatives →
Model Context Protocol registry, transports, and OAuth bridges for Electric Agents
Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol
Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.
Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth
OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.
Register [Model Context Protocol](https://modelcontextprotocol.io) servers as tool integrations for an executor. Supports both stdio-launched servers and remote (HTTP) servers, with optional OAuth.
pentest-mcp-server: common questions
How do I install pentest-mcp-server?
In Claude Code run claude mcp add pentest-mcp-server -- npx -y @cyanheads/pentest-mcp-server. For Claude Desktop, Cursor and VS Code, paste the config shown above and restart. See the install guides.
Is pentest-mcp-server the official server?
pentest-mcp-server is a community project by cyanheads, not verified by a company domain.
Is pentest-mcp-server free?
The code is published under the Apache-2.0 licence. The service it connects to may have its own pricing.
Is pentest-mcp-server safe to use?
It scores 78 of 100. Grades: maintenance A, licence A, quality C. The security check has not run for it yet. Review the code before you install. How grades work.
What are alternatives to pentest-mcp-server?
Similar MCP servers: Agents MCP, Agentmesh MCP Proxy, OpenWork MCP Gateway, MCP Remote.
Does pentest-mcp-server work with ChatGPT?
Yes. Add its server URL in ChatGPT as a custom connector. See MCP in ChatGPT.