pentestMCP

Overview

pentestMCP bridges Large Language Models with practical penetration testing tools through the Model Context Protocol. It functions as an MCP Server, exposing over 20 security assessment utilities (Nmap, Nuclei, ZAP, SQLMap, etc.) as callable tools within MCP-compatible clients. The server runs in a Docker container, communicating via stdio with client hosts like Claude Desktop or VS Code, enabling natural language control over complex security workflows. It implements asynchronous patterns for long-running scans and includes resource management features.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• run_subfinder

  Discovers subdomains using ProjectDiscovery's Subfinder.

  Try:Find subdomains for example.comTry:Run subfinder scan on target.com
• launch_nmap_scan

  Executes Nmap network scans asynchronously.

  Try:Launch Nmap service scan on scanme.nmap.orgTry:Run comprehensive Nmap scan on 192.168.1.1
• fetch_nmap_results

  Retrieves results from an asynchronous Nmap scan.

  Try:Get my Nmap scan resultsTry:Fetch the output from the Nmap scan I launched
• run_gobuster_scan

  Performs directory/file/DNS bruteforcing with Gobuster asynchronously.

  Try:Use Gobuster to find directories on example.comTry:Run Gobuster DNS enumeration on domain.com
• launch_nuclei_scan

  Runs template-based vulnerability scans with ProjectDiscovery's Nuclei asynchronously.

  Try:Launch Nuclei scan on target.comTry:Run Nuclei vulnerability scan against IP address
• run_sqlmap_tool

  Executes SQLmap for SQL injection testing asynchronously.

  Try:Run SQLmap on this login page URLTry:Test for SQL injection vulnerabilities with SQLmap
• run_searchsploit

  Searches the local Exploit-DB database using Searchsploit.

  Try:Search for exploits for Apache 2.4Try:Find vulnerabilities related to WordPress 5.0
• ad_user_enum

  Enumerates users in Active Directory.

  Try:Enumerate users in Active DirectoryTry:List AD users for domain controller
• ad_bloodhound_collect

  Collects data for Active Directory analysis with BloodHound.

  Try:Collect AD data for BloodHound analysisTry:Run BloodHound data collection
• run_zap_active_scan

  Performs an active scan with OWASP ZAP.

  Try:Run ZAP active scan on this websiteTry:Initiate OWASP ZAP scan for target application
• run_curl_tool

  Executes cURL commands for HTTP interaction.

  Try:Use curl to make a GET request to example.comTry:Execute a curl POST request with JSON data
• fetch_whois_data

  Retrieves WHOIS information for a domain.

  Try:Get WHOIS data for example.comTry:Find the registration details for target-domain.com

Comparable tools

Installation

docker pull ramgameer/pentest-mcp:latest

{
  "mcpServers": {
    "pentestMCP": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ramgameer/pentest-mcp:latest"
      ]
    }
  }
}

FAQ

What is pentestMCP?

pentestMCP is an MCP Server that exposes penetration testing tools (Nmap, Nuclei, ZAP, etc.) as callable tools for AI agents to use in security analysis.

How do I integrate pentestMCP with Claude Desktop?

Add the MCP server configuration to your claude_desktop_config.json file using the Docker run command provided in the README, then restart Claude Desktop.

Compare pentestMCP with