trackmcp
Back to directory
ch1nhpd

pentest-tools-mcp-server

View on GitHub

Pentest-Tools-MCP-Server

6 stars PythonDeveloper Kits Updated Oct 22, 2025

Documentation

Pentest Tools MCP Server

An MCP (Model Context Protocol) server for penetration testing tools, designed to work with various LLM clients like Claude Desktop, Roo Code, and other compatible MCP clients.

Features

  • Comprehensive pentesting tools:
    • Directory scanning (FFuf, Dirsearch)
    • Vulnerability scanning (Nuclei, XSStrike)
    • API testing
    • Reconnaissance
    • And more...
  • Pre-configured wordlists from SecLists
  • Automated report generation
  • Claude Desktop integration

Prerequisites

  • Docker and Docker Compose (for containerized setup)
  • Claude Desktop application or other MCP-compatible client
  • Python 3.10+ and uv (for local setup)

Directory Setup

1. Create the required directories:

bash
# Create directories
mkdir -p reports templates wordlists

2. Directory structure should look like this:

code
pentest-tools/
├── reports/          # For storing scan reports
├── templates/        # For report templates
├── wordlists/        # For custom wordlists
├── pentest-tools-mcp-server.py
├── config.json
├── requirements.txt
├── docker-compose.yml
└── Dockerfile

Setup

Docker Setup (Recommended)

1. Build and start the container:

bash
docker-compose up -d --build

2. Verify the container is running:

bash
docker-compose ps

3. Check logs if needed:

bash
docker-compose logs -f

Local Setup

1. Install dependencies:

bash
uv venv
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
uv pip install -r requirements.txt

2. Install required system tools (example for Ubuntu/Debian):

bash
sudo apt-get install nmap whatweb dnsrecon theharvester ffuf dirsearch sqlmap

Claude Desktop Integration

1. Configure Claude Desktop:

Windows:

code
%APPDATA%\Claude\claude_desktop_config.json

MacOS/Linux:

code
~/Library/Application Support/Claude/claude_desktop_config.json

2. Add server configuration:

For Docker setup:

json
{
    "mcpServers": {
        "pentest-tools": {
            "command": "docker-compose",
            "args": [
                "run",
                "--rm",
                "pentest-tools",
                "python3",
                "pentest-tools-mcp-server.py"
            ],
            "cwd": "\\Path\\to\\pentest-tools"
        }
    }
}

If the above configuration doesn't work on Windows, try this alternative approach:

json
{
    "mcpServers": {
        "pentest-tools": {
            "command": "cmd",
            "args": [
                "/c",
                "cd /d \\path\\to\\pentest-tools && docker-compose run --rm pentest-tools python3 pentest-tools-mcp-server.py"
            ]
        }
    }
}

Note about `cwd` (Current Working Directory):

  • `cwd` tells Claude Desktop which directory to run the command from
  • It must be the absolute path to the directory containing `docker-compose.yml`
  • On Windows, use double backslashes (`\\`) in paths
  • On Linux/MacOS, use forward slashes (`/`)

3. Restart Claude Desktop

Usage

Available commands in Claude Desktop:

1. Reconnaissance:

code
/recon example.com

2. Directory scanning:

code
/scan example.com --type directory

3. Vulnerability scanning:

code
/scan example.com --type full
/scan example.com --type xss
/scan example.com --type sqli
/scan example.com --type ssrf

4. API testing:

code
/scan api.example.com --type api

Natural language commands:

  • "Run a full security scan on example.com"
  • "Check for XSS vulnerabilities on example.com"
  • "Perform reconnaissance on example.com"

Directory Structure Details

code
pentest-tools/
├── reports/            # Scan reports directory
│   ├── recon/         # Reconnaissance reports
│   ├── vulns/         # Vulnerability scan reports
│   └── api/           # API testing reports
├── templates/          # Report templates
│   ├── recon.html     # Template for recon reports
│   ├── vuln.html      # Template for vulnerability reports
│   └── api.html       # Template for API test reports
├── wordlists/         # Custom wordlists
│   ├── SecLists/     # Cloned from SecLists repo
│   ├── custom/       # Your custom wordlists
│   └── generated/    # Tool-generated wordlists
├── pentest-tools-mcp-server.py # Main MCP server
├── config.json        # Tool configuration
├── requirements.txt   # Python dependencies
├── docker-compose.yml # Docker configuration
└── Dockerfile        # Container definition

Security Notes

  • Always ensure you have permission to scan targets
  • Keep tools and dependencies updated
  • Review scan results carefully
  • Follow responsible disclosure practices

Frequently asked questions

What is pentest-tools-mcp-server?

pentest-tools-mcp-server is Pentest-Tools-MCP-Server

How do I install pentest-tools-mcp-server?

Open the GitHub repository and follow its README. Most MCP servers are added to your client's MCP config, then called by your agent.

Is pentest-tools-mcp-server open source?

Yes — it is hosted on GitHub at https://github.com/ch1nhpd/pentest-tools-mcp-server and has 6 stars.

Related MCP tools

awslabsmcp

AWS MCP Servers — helping you get the most out of AWS, wherever you use MCP. Python-based implementation. Trusted by 6900+ developers.

6,922 Python
awsmcpmcp-client+6
open-webuimcpo

A simple, secure MCP-to-OpenAPI proxy server Python-based implementation. Trusted by 3500+ developers. Trusted by 3500+ developers.

3,594 Python
mcpmcp-servermcp-to-openapi+2
MarkusPfundsteinmcp-obsidian

MCP server that interacts with Obsidian via the Obsidian rest API community plugin Python-based implementation. Trusted by 2300+ developers.

2,353 Python
chrishayukmcp-cli

Default Configuration: MCP CLI defaults to using Ollama with the gpt-oss reasoning model for local, privacy-focused operation without requiring API keys.

1,747 Python
MiniMax-AIminimax-mcp

Official MiniMax Model Context Protocol (MCP) server that enables interaction with powerful Text to Speech, image generation and video generation APIs.

1,032 Python
image-generationimage-to-videomcp+7
coleam00mcp-mem0

MCP server for long term agent memory with Mem0. Also useful as a template to get you started building your own MCP server with Python!

592 Python

Run your own MCP server? See who uses it and what to fix.

Measure it with TrackMCP