Advertise
MCP.so
Sign In

MCP Server Pentest

@MCP-Mirror

Repository

Basic information

Category

Other

License

MIT license

Transports

stdio

Author

MCP-Mirror

About MCP Server Pentest

Mirror of

#9olidity#pentest#security-testing

MCP Server Pentest config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "9olidity_MCP-Server-Pentest": {
      "url": "https://test.com",
      "paramName": "text"
    }
  }
}

MCP Server Pentest tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list directly from this server's endpoint using the button above.

Overview

What is MCP Server Pentest?

MCP Server Pentest is a server that integrates browser automation with security testing, enabling automated detection of XSS and SQL injection vulnerabilities in URLs. It also provides full browser control for navigation, screenshots, click interactions, and JavaScript execution, targeting developers and security testers who need to automate web security checks.

How to use MCP Server Pentest?

Install by running npx playwright install firefox, yarn install, and npm run build. Then add the provided JSON configuration block to your Claude config file, pointing to the built dist/index.js. Use the exposed tools (e.g., broser_url_reflected_xss, browser_url_sql_injection) by passing a URL and parameter name as arguments.

Key features of MCP Server Pentest

  • Automatic XSS vulnerability detection in URLs
  • Automatic SQL injection vulnerability detection in URLs
  • Full-page or element-specific screenshot capture
  • Browser navigation, clicking, form filling, and text selection
  • Console log monitoring and JavaScript execution in browser context

Use cases of MCP Server Pentest

  • Automatically test a web application’s URL parameters for reflected XSS
  • Scan form inputs or query strings for SQL injection flaws
  • Take screenshots of vulnerable pages for reporting
  • Fill and submit forms to test login or search endpoints
  • Execute custom JavaScript to extract runtime page data

Frequently asked questions

1

What runtime dependencies are required?

The server requires Node.js, the Playwright package, and a Firefox browser (installed via `npx playwright install firefox`). It runs as a command-line MCP server.

2

Which browsers are supported?

Firefox is explicitly installed and used; the README does not mention Chrome or other browsers.

3

Can it interact with dynamic content?

Yes – tools for clicking, hovering, filling inputs, and selecting dropdown options are available, along with JavaScript evaluation in the browser context.

4

Where are screenshots saved?

The README does not specify a default save location; screenshots are likely stored in the working directory or must be explicitly named via the `name` parameter in `browser_screenshot`.

Comments

More Other MCP servers

Volley.sh

Volley

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K

Handl

Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.

Figs, Relationship Expert

Figs O'Sullivan, LMFT

Couples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep

Glasswarp

Glasswarp

See and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.

Advertise