MCP server

Pentest

io.github.cyanheads/pentest-mcp-server

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Offline methodology engine for authorized penetration testing, CTF, and security research.

Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Working at last check

Tools

7

Token cost

About 2,695 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http pentest-mcp-server https://pentest.caseyjhand.com/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.pentest-mcp-server]
url = "https://pentest.caseyjhand.com/mcp"

Gemini CLI

{"mcpServers":{"pentest-mcp-server":{"httpUrl":"https://pentest.caseyjhand.com/mcp"}}}

Cursor

{"mcpServers":{"pentest-mcp-server":{"url":"https://pentest.caseyjhand.com/mcp"}}}

VS Code

{"servers":{"pentest-mcp-server":{"type":"http","url":"https://pentest.caseyjhand.com/mcp"}}}

Antigravity

agy mcp add pentest-mcp-server https://pentest.caseyjhand.com/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"pentest-mcp-server","server_url":"https://pentest.caseyjhand.com/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"pentest-mcp-server","server_url":"https://pentest.caseyjhand.com/mcp"}

Tools

• pentest_analyze_response ~347 tokens
  Analyze an HTTP response from authorized probing for information leakage, fingerprinting signals, and related exposure. Structured findings cover version disclosures, stack traces, debug headers, internal paths, authentication patterns, CORS configuration, detection signals, remediation, and associa
• pentest_encode_payload ~322 tokens
  Transform a payload string through an ordered encoding chain for authorized filter research. Results include the final value, intermediate values, optional decode path and rationale, and detection guidance. All transforms are local; no live probing occurs.
• pentest_generate_payloads ~575 tokens
  Generate context-specific payload templates for authorized systems. Each template includes its vulnerability category, context rationale, WAF/IDS detection signature, mitigation, optional WAF research note, and optional encoded variant.
• pentest_get_guide ~551 tokens
  Return an authorized-testing methodology for a selected vector and optional target context. The playbook covers reconnaissance, enumeration, exploitation, and post-exploitation phases with objectives, techniques, detection signals, mitigations, common pitfalls, references, and context-derived tool s
• pentest_lookup_group ~199 tokens
  Look up a MITRE ATT&CK threat group or software entry by ID, name, or keyword. Results include ATT&CK identity, aliases, type, description, and associated techniques with procedure-level context from public ATT&CK reporting.
• pentest_lookup_technique ~249 tokens
  Look up a MITRE ATT&CK technique by exact ID or keyword. Results include tactics, platforms, description, detection data, public procedure examples, mitigations, related sub-techniques, and dataset version.
• pentest_map_techniques ~452 tokens
  Rank ATT&CK techniques and OWASP test cases against an authorized target profile of technology stack, exposed services, authentication type, and operating system. Results include profile-specific relevance, detection opportunities, mitigations, and associated methodology vectors.

Browse

• GitHub tools
• GitHub and code hosting

Related MCP servers

• Gapup
  271 agent-payable tools: competitive intel, finance, KYC, compliance, ESG. x402 per-call.
• HubVibe: Pay-per-Call Agent Tools: Web Search, Email Verify, Contact Screening, Stocks, Crypto, News
  Pay-per-call agent tools: web search, email verification, contact screening, stocks, crypto and news
• ScorpTech x402 API
  112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
• 7IT Solutions
  Store speed, web-app security checks, automation ROI, checklists and guides from 7IT Solutions.
• AI Visibility Index
  AI visibility rankings for 104 Japanese EC companies across ChatGPT, Claude, Gemini, Perplexity.
• AAJ Marketing Engines
  Deterministic marketing math for AI agents: LTV:CAC, pipeline coverage, A/B tests, pricing.
• Tooloracle Dora
  DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.
• QuantCalc Retirement Engine
  Retirement Monte Carlo, tax-aware withdrawal and Roth-conversion plans, and a 2026 return estimate.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.cyanheads/pentest-mcp-server.svg)](https://aptlynx.net/servers/io.github.cyanheads/pentest-mcp-server)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents