/ 100

1 month ago

pulsemcp

Pentest AI

Provides penetration testing tools for reconnaissance, vulnerability scanning, and exploit assistance.

→ 0xsteph/pentest-ai· pypi: ptai· 20K installs· listed on pulsemcp

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

PulseMCP Glama github_topic

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 7 credentials: GITHUB_TOKEN, VAULT_TOKEN, PENTEST_AI_API_KEY, OPENAI_API_KEY, ANTHROPIC_API_KEY, PTAI_OAST_TOKEN, PENTEST_AI_API_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configPENTEST_AI_DB_PATH

configPENTEST_AI_RUNTIME_DIR

configPTAI_VERSION_OVERRIDE

configPTAI_SKIP_VERSION_CHECK

configPENTESTAI_API_BASE

configPENTEST_DB_PATH

configGITHUB_OUTPUT

configGITHUB_REPOSITORY

🔐 secretGITHUB_TOKEN

configGITHUB_REF

🔐 secretVAULT_TOKEN

configVAULT_ADDR

configPTAI_FORCE_EXIT_DISABLE

configPTAI_FORCE_EXIT_SECS

configPENTEST_AI_LLM_PROVIDER— export =ollama # Ollama (default localhost:11434)

🔐 secretPENTEST_AI_API_KEY

🔐 secretOPENAI_API_KEY— export =sk-... # OpenAI

🔐 secretANTHROPIC_API_KEY— export =sk-ant-... # Claude (best results)

configPTAI_UPSTREAM_PROXY

configPTAI_NO_OAST

configPTAI_OAST_SERVER

🔐 secretPTAI_OAST_TOKEN

configPENTEST_EVIDENCE_DIR

🔐 secretPENTEST_AI_API_TOKEN

configNO_COLOR

configOPENAI_BASE_URL

configPENTEST_WEBHOOK_URL

configPENTEST_WEBHOOK_TYPE

configPTAI_NON_INTERACTIVE— In non-interactive contexts (=1 or no TTY) ptai uses what's on PATH and logs (rather than prompts) for anything missing.

configPENTEST_AI_CONFIG_DIR

configPENTEST_AI_AUP_ACCEPTED— First-run prompts you to confirm AUP acceptance and persists the choice to ~/.pentest-ai/aup-consent.txt. Set =1 in CI to bypass the prompt non-interactively.

configPENTEST_AI_CACHE

configPTAI_STRICT_EVIDENCE

configPTAI_DB_PATH

configXDG_DATA_HOME

configPTAI_INSTALL_PREFS

configOLLAMA_HOST

configOLLAMA_BASE_URL

configPENTEST_AI_MODEL

configPTAI_FACTORY_VALIDATE

configPTAI_FACTORY_VALIDATE_TIMEOUT_MS

configPENTEST_AI_MCP_CONFIG

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/ptai-ca7osi)](https://m8ven.ai/mcp/ptai-ca7osi)

commit: 0d1918a185df02353d533869593aecc81a876f73

code hash: b48ae12ee38ddf8dbfce0e648c3009a473635b8d6920052af4f69f4d7b776084

verified: 6/15/2026, 3:10:33 PM

view raw JSON →