pentestMCP

Item: pentestMCP
Rating: 54
Author: M8ven

An MCP server that exposes over 20 standard penetration testing utilities, such as Nmap, SQLMap, and OWASP ZAP, as callable tools for AI agents. It enables natural language control over complex security workflows for automated and interactive penetration testing.

→ RamKansal/pentestMCP · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

2 tools describe read intent but their handlers mutate — fetch_whois_data (line 323: result = subprocess.run(['whois', domain], capture_output=True, text=True)); fetch_whois_data (line 261: result = subprocess.run(['whois', domain], capture_output=True, text=True))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/ramkansal-pentestmcp-1lu35d)](https://m8ven.ai/mcp/ramkansal-pentestmcp-1lu35d)

commit: bd1bf3ee442696da6eb6d8cd8b35a3e2ec59a76d

code hash: d5a01eded98535e9a0eeb0777732d836d48949592f7f8032c62e0d290c1b90e8

verified: 6/17/2026, 12:39:03 PM

view raw JSON →