Hybrid

pentest-mcp-server

Offline methodology engine for authorized penetration testing, CTF, and security research.

io.github.cyanheads/pentest-mcp-serverSource repository

Version0.3.0latest catalog version

ConnectionHybridstreamable-http · npm

PublishedOct 30, 2026catalog

UpdatedOct 30, 2026catalog

Overview

What this server provides

Offline methodology engine for authorized penetration testing, CTF, and security research.

Connect

Remote endpoint 1streamable-http

https://pentest.caseyjhand.com/mcp

Install

Package 1npm

@cyanheads/pentest-mcp-server0.3.0

Runtime npxTransport stdio

PENTEST_ENABLE_PAYLOAD_GENERATION
Enable payload generation and encoding. Set false to retain the five reference tools only.
Format: boolean · Default: true
Optional
MCP_LOG_LEVEL
Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').
Format: string · Default: info
Optional

Package 2npm

@cyanheads/pentest-mcp-server0.3.0

Runtime npxTransport streamable-http

http://localhost:3010/mcp

PENTEST_ENABLE_PAYLOAD_GENERATION
Enable payload generation and encoding. Set false to retain the five reference tools only.
Format: boolean · Default: true
Optional
MCP_HTTP_HOST
The hostname for the HTTP server.
Format: string · Default: 127.0.0.1
Optional
MCP_HTTP_PORT
The port to run the HTTP server on.
Format: string · Default: 3010
Optional
MCP_HTTP_ENDPOINT_PATH
The endpoint path for the MCP server.
Format: string · Default: /mcp
Optional
MCP_AUTH_MODE
Authentication mode to use: 'none', 'jwt', or 'oauth'.
Format: string · Default: none
Optional
MCP_LOG_LEVEL
Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').
Format: string · Default: info
Optional

View server metadata

Namespace