Professional pentest MCP server with stdio + Streamable HTTP transports, bundled MCP Inspector launcher, bearer auth, SoW-aware reporting, and modern tooling across sniffing/finding/bruteforce/crackin…
| Tool name | Description | Destructive? |
|---|---|---|
| setMode | ✓ no | |
| nmapScan | ✓ no | |
| generateWordlist | ✓ no | |
| runJohnTheRipper⚠ | ⚠ yes | |
| runHashcat⚠ | ⚠ yes |
| cancelScan | ✓ no | |
| listEngagementRecords | ✓ no | |
| getEngagementRecord | ✓ no | |
| createClientReport | ✓ no | |
| gobuster | ✓ no | |
| nikto | ✓ no | |
| subfinderEnum | ✓ no | |
| httpxProbe | ✓ no | |
| ffufScan | ✓ no | |
| nucleiScan | ✓ no | |
| trafficCapture | ✓ no | |
| hydraBruteforce | ✓ no | |
| privEscAudit | ✓ no | |
| extractionSweep | ✓ no |
{
"mcpServers": {
"pentest": {
"command": "npx",
"args": [
"-y",
"pentest-mcp"
]
}
}
}