Advertise
MCP.so
Sign In

MCP Server Pentest

@9olidity

Repository

Basic information

Category

Other

License

MIT

Transports

stdio

Author

9olidity

About MCP Server Pentest

No overview available yet

#playwright#browser-automation#web-testing

MCP Server Pentest config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "playwright": {
      "command": "npx",
      "args": [
        "-y",
        "/Users/...../dist/index.js"
      ],
      "disabled": false,
      "autoApprove": []
    }
  }
}

MCP Server Pentest tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is MCP Server Pentest?

MCP Server Pentest is an MCP server that automates browser-based security vulnerability detection (XSS and SQL injection) and provides comprehensive browser automation capabilities. It is intended for security testers and developers who need to scan web applications for common vulnerabilities and interact with browser pages programmatically.

How to use MCP Server Pentest?

Install dependencies with npx playwright install firefox, then run yarn install and npm run build. The installation automatically adds a configuration entry to your Claude config file, which points to the built server script. Once configured, you can invoke its tools from Claude.

Key features of MCP Server Pentest

  • Automatic XSS and SQL injection vulnerability detection
  • Full page and element screenshots
  • Browser navigation, clicking, hovering, form filling, and selection
  • Console log monitoring
  • JavaScript execution in the browser context

Use cases of MCP Server Pentest

  • Scanning web application URLs for reflected XSS vulnerabilities
  • Testing for SQL injection vulnerabilities in URL parameters
  • Automating browser interactions during security audits
  • Capturing screenshots of web pages or specific elements for documentation
  • Executing custom JavaScript to inspect or modify page behavior

Frequently asked questions

1

What vulnerability detection tools are available?

The server provides `broser_url_reflected_xss` for XSS testing and `browser_url_sql_injection` for SQL injection testing. Both accept a URL and a parameter name.

2

How do I install and configure the server?

Run `npx playwright install firefox`, then `yarn install` and `npm run build`. The installation automatically adds a configuration entry to your Claude MCP settings file with the server command pointing to the built `dist/index.js`.

3

What browser automation tools does it offer?

Tools include `browser_navigate`, `browser_screenshot`, `browser_click`, `browser_click_text`, `browser_hover`, `browser_hover_text`, `browser_fill`, `browser_select`, `browser_select_text`, and `browser_evaluate` for executing JavaScript.

4

Does it support console log monitoring?

Yes, console log monitoring is listed as a feature, though no dedicated tool is documented for it.

5

What are the runtime dependencies?

The server requires Node.js, Playwright (specifically Firefox), and the packages installed via `yarn install` and `npm run build`.

Comments

More Other MCP servers

Yuppsy

Yuppsy MCP: build and publish real estate websites from your AI assistant. Yuppsy lets your AI assistant create live websites for real estate agents and individual property listings. You don't need a designer or any code

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

EverArt

modelcontextprotocol

Model Context Protocol Servers

88.1K

Figs, Relationship Expert

Figs O'Sullivan, LMFT

Couples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K
Advertise