🔧

Pentest ServerVerified🛡 No advisories

io.github.cyanheads/pentest-mcp-server

New to MCP? Start here →

1★ stars

0weekly installs

1 month agolast release

Provenancewhere it came from, and what was verified

✓

Verified namespace

Published to the official MCP registry by github.com/cyanheads, which proved it owns this namespace.

Verified owner: github.com/cyanheads ↗io.github.cyanheads/pentest-mcp-server

🛡 Permissions & trustwhat this server can touch before you run it

◆

Network access

Connects to a hosted remote endpoint.

✓

Configuration

Reads MCP_LOG_LEVEL, MCP_HTTP_HOST, MCP_HTTP_PORT, MCP_HTTP_ENDPOINT_PATH, MCP_AUTH_MODE, MCP_LOG_LEVEL.

About

Offline methodology engine for authorized penetration testing, CTF, and security research.

Packages & transports

npm@cyanheads/pentest-mcp-serverv0.1.6 · bun

remotehttps://pentest.caseyjhand.com/mcpHTTP

Metadata

Sourcegithub.com/cyanheads/pentest-mcp-server ↗

Categorydevops

LicenseApache-2.0

Quality 82/100

how much you can lean on this server

Maintenance

36/45

Completeness

35/35

Reliability

11/20

Computed from the server's own data, not a hidden formula. This measures how much you can depend on it, not how popular it is. Stars are shown separately, on purpose. How it's scored →

Tool definition quality 96/100

how well its 7 tools describe themselves to an agent

▸pentest_guide100A

Description

present and substantive

Param types

params declare a type

Param docs

params are described

Structure

required fields declared

▸pentest_analyze_response93A

Description

present and substantive

Param types

params declare a type

Param docs

params are described

Structure

required fields declared

▸pentest_lookup_technique100A

Description

present and substantive

Param types

params declare a type

Param docs

params are described

Structure

required fields declared

▸pentest_lookup_group100A

Description

present and substantive

Param types

params declare a type

Param docs

params are described

Structure

required fields declared

▸pentest_map_techniques93A

Description

present and substantive

Param types

params declare a type

Param docs

params are described

Structure

required fields declared

▸pentest_generate_payloads100A

Description

present and substantive

Param types

params declare a type

Param docs

params are described

Structure

required fields declared

▸pentest_encode100A

Description

present and substantive

Param types

params declare a type

Param docs

params are described

Structure

required fields declared

Structural, not an LLM's opinion: each check is a fact about the tool's schema, so it's reproducible. One weak tool drags the score (60% average, 40% worst). How it's scored →

For the maintainer

Raise this grade

up to +18 on quality

Own this server? Here's exactly what to change, biggest wins first. Every number below is a fixed point value, so you can see what each edit is worth before you make it.

Keep it activeMaintenance

Push to the repo or cut a release. Activity within the last 30 days earns the full 45.

Collect working reviewsReliability

With no reviews this sits at a neutral 11. Reviews reporting it works push it toward the full 20.

Tool definitions to fix first

pentest_analyze_response93/100

No `required` array. Declare which params are mandatory so an agent knows what it must provide.

pentest_map_techniques93/100

No `required` array. Declare which params are mandatory so an agent knows what it must provide.

Already earned (4) ▾

✓Describe what it does+11

✓Give an install path+11

✓Declare a license+7

✓Link the source+6

These are structural checks, so the fixes are exact. See the full formula →

Add a badge to your README

[![SocketCat](https://socketcat.com/badge/io.github.cyanheads/pentest-mcp-server)](https://socketcat.com/servers/io.github.cyanheads/pentest-mcp-server)

Shows your live quality grade and links back here. It updates itself as the grade changes.

Add to your client

Pick your client, copy, paste into its config. That's the whole setup.

~/.claude/claude_desktop_config.json

{
  "mcpServers": {
    "pentest_mcp_server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/pentest-mcp-server"
      ]
    }
  }
}

▶ Try itlive against pentest.caseyjhand.com

This server has a hosted endpoint, so we can connect and list its actual tools right here. Nothing runs on your machine.

Pentest Server✓Verified🛡 No advisories

Provenancewhere it came from, and what was verified

🛡 Permissions & trustwhat this server can touch before you run it

About

Packages & transports

Metadata

Raise this grade

Add a badge to your README

Reviews

▶ Try itlive against pentest.caseyjhand.com

Pentest ServerVerified🛡 No advisories