io.github.cyanheads/pentest-mcp-server

up checked 2026-11-11T03:39:10.835Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided description

Offline methodology engine for authorized penetration testing, CTF, and security research.

Summary by lookupd

Offline pentest methodology: analyzes HTTP responses, generates and encodes payload templates, and maps ATT&CK and OWASP techniques to…

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http pentest-mcp-server https://pentest.caseyjhand.com/mcp

Claude Code, npm package (stdio)

claude mcp add pentest-mcp-server -- npx -y @cyanheads/pentest-mcp-server

Claude Code, npm package (stdio)

claude mcp add pentest-mcp-server -- npx -y @cyanheads/pentest-mcp-server

Codex, remote (streamable-http)

codex mcp add pentest-mcp-server --url https://pentest.caseyjhand.com/mcp

Codex, npm package (stdio)

codex mcp add pentest-mcp-server -- npx -y @cyanheads/pentest-mcp-server

Codex, npm package (stdio)

codex mcp add pentest-mcp-server -- npx -y @cyanheads/pentest-mcp-server

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "pentest-mcp-server": {
      "url": "https://pentest.caseyjhand.com/mcp"
    }
  }
}

Cursor, npm package (stdio) → .cursor/mcp.json

{
  "mcpServers": {
    "pentest-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/pentest-mcp-server"
      ]
    }
  }
}

Cursor, npm package (stdio) → .cursor/mcp.json

{
  "mcpServers": {
    "pentest-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@cyanheads/pentest-mcp-server"
      ]
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (7 tools)

Publisher-provided text

• pentest_get_guide Return an authorized-testing methodology for a selected vector and optional target context. The playbook covers reconnaissance, enumeration, exploitation, and p
• pentest_analyze_response Analyze an HTTP response from authorized probing for information leakage, fingerprinting signals, and related exposure. Structured findings cover version disclo
• pentest_lookup_technique Look up a MITRE ATT&CK technique by exact ID or keyword. Results include tactics, platforms, description, detection data, public procedure examples, mitigations
• pentest_lookup_group Look up a MITRE ATT&CK threat group or software entry by ID, name, or keyword. Results include ATT&CK identity, aliases, type, description, and associated techn
• pentest_map_techniques Rank ATT&CK techniques and OWASP test cases against an authorized target profile of technology stack, exposed services, authentication type, and operating syste
• pentest_generate_payloads Generate context-specific payload templates for authorized systems. Each template includes its vulnerability category, context rationale, WAF/IDS detection sign
• pentest_encode_payload Transform a payload string through an ordered encoding chain for authorized filter research. Results include the final value, intermediate values, optional deco

Details

• Version: 0.3.0
• Transports: streamable-http, stdio
• Uptime (7 days): 100%
• Median latency: 638 ms
• First indexed: 2026-11-01T09:26:31.551Z
• Last seen in registry: 2026-11-01T09:26:31.671Z
• Repository: https://github.com/cyanheads/pentest-mcp-server

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.cyanheads/pentest-mcp-server.svg)](https://lookupd.com/servers/io.github.cyanheads/pentest-mcp-server)

• 62092 servers
• Last crawl: 2026-11-11T17:38:11.606Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp