9 #pentesting MCP Servers & Clients
Every MCP server and client below is tagged #pentesting — install one to give Claude, Cursor, VS Code, or any other MCP-compatible client access to pentesting tools.
すべて
Lamda
firerpa
Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.
JADX-AI-MCP (Part of Zin MCP Suite)
zinja-coder
Plugin for JADX to integrate MCP server
MCP Kali Server
Wh0am123
MCP configuration to connect AI agent to a Linux machine.
😎 Contributing
Puliczek
🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️
Pentest MCP: Professional Penetration Testing Toolkit
DMontgomery40
NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.
rqwstr
Kjopstad-IT
AI-native HTTP security testing toolkit (MCP server): 17 HTTP tools giving an AI agent low-level control over HTTP/1.1 and HTTP/2 (raw framing, connection pinning, intruder, race, OOB, chains) on its own Go engine. Free tier; docs at rqwstr.com.
Mythic MCP
xpn
A simple POC to expose Mythic as a MCP server
Kali MCP Server
cyberillo
A Python MCP Server that connects Large Language Models natively to a comprehensive suite of offensive security tools.
PentestAgentMCP
ibrahimsaleem
Repository for creating an automatic pentesting agent using MCP servers.
Frequently asked questions
What is a #pentesting MCP server?
- An MCP server tagged #pentesting implements the Model Context Protocol so AI assistants like Claude, Cursor, and VS Code can access pentesting-related tools, data, or APIs.
How many #pentesting MCP servers and clients are there?
- mcp.so currently lists 9 MCP servers and clients tagged #pentesting.
How do I install a #pentesting MCP server?
- Open any server below and copy its install snippet into Claude Desktop, Cursor, VS Code, or another MCP client's configuration — remote servers need no separate download.