pentest-mcp
具备自然语言交互的渗透测试工具包. pentest-mcp is a Model Context Protocol (MCP) server maintained by DMontgomery40. It connects to MCP-compatible clients such as Claude Desktop, Cursor, Cline, and other agents that speak the protocol. It exposes 4 tools, including Nmap, Gobuster, Nikto and John the Ripper, that an agent can call directly. It is categorized under Security/Reconnaissance and Tool/CLI.
什么是MCP
渗透测试MCP是一个模型上下文协议服务器，它将核心渗透测试工具（Nmap、Gobuster、Nikto、John the Ripper）整合为统一的自然语言交互界面，专为安全专业人员设计。
如何使用MCP
通过npm安装，在您的MCP文件服务器中完成配置后，即可通过简单的英语指令执行复杂的渗透测试工作流——这些指令能基于上下文感知将多个工具链式调用。
MCP的用途
专业渗透测试工作流涵盖：网络侦察、Web漏洞扫描、目录枚举、密码破解及自动化报告生成，所有操作均可通过对话式指令完成。
AIMCP authority
DR and traffic signal for the AIMCP public domain.
Frequently asked questions
What is the pentest-mcp MCP server?
pentest-mcp is a Model Context Protocol server from DMontgomery40. It lets MCP-compatible AI clients call its tools over a standard interface, so agents like Claude, Cursor, and Cline can use it without custom integration.
How do I connect pentest-mcp to my AI client?
Add pentest-mcp to your client's MCP configuration using the stdio or SSE connection shown in the usage examples on this page, then restart the client to load the server.
What tools does pentest-mcp provide?
pentest-mcp provides 4 tools: Nmap, Gobuster, Nikto and John the Ripper.
Is pentest-mcp free to use?
pentest-mcp is listed on AIMCP for free. Any API keys or accounts required by the underlying service are set by its provider.
Vernclaw Plugins for OpenClaw
Ready-to-use connectors for SEO data, social reading & content generation. Pay-as-you-go credits with audit logs.