Pentest AI MCP Server

Content

Pentest AI MCP Server exposes pentest-ai's offensive-security workflows to Claude and other MCP clients through the ptai mcp command. It can start and track engagements, list findings, retrieve attack chains, list and run wrapped security tools, plan and install missing tools, run probes, launch specialist assessments, inspect running subprocesses, and generate engagement outputs.

The project is intended for authorized security testing. Its MCP path lets an existing MCP client subscription drive pentest-ai without a separate LLM API key, while the standalone CLI can use configured LLM providers for non-MCP operation.

Source Review

• https://github.com/0xSteph/pentest-ai
• https://github.com/0xSteph/pentest-ai/blob/main/README.md
• https://pypi.org/pypi/ptai/json
• https://github.com/0xSteph/pentest-ai/blob/main/pyproject.toml
• https://github.com/0xSteph/pentest-ai/blob/main/mcp_server/server.py
• https://github.com/0xSteph/pentest-ai/blob/main/mcp_server/security_tools.py
• https://github.com/0xSteph/pentest-ai/blob/main/tools/registry.py
• https://github.com/0xSteph/pentest-ai/blob/main/SECURITY.md
• https://github.com/0xSteph/pentest-ai/blob/main/LICENSE

These sources were reviewed on 2026-06-06. Prefer the live repository, README, PyPI metadata, Python package metadata, MCP server implementation, MCP-side tool install helpers, security-tool registry, security policy, and license file for current install commands, MCP tools, target guardrails, external tool behavior, auth handling, and licensing.

Features

• Python package ptai with ptai and pentest-ai console commands.
• MCP server launched with ptai mcp.
• Engagement tools for starting authorized assessments, checking status, retrieving findings, and inspecting attack chains.
• Tool catalog workflows for listing wrapped tools, running individual tools, planning expected tools, and installing missing tools after approval.
• Probe and assessment workflows for web apps, recon, API security, cloud, Active Directory, credentials, vulnerabilities, privilege escalation, mobile, wireless, social engineering, LLM red-team, and multi-target campaigns.
• Findings database and report-oriented output workflows.
• MIT license.

Installation

Install the package:

pip install ptai

Configure an MCP client:

{
  "mcpServers": {
    "pentest-ai": {
      "command": "ptai",
      "args": ["mcp"]
    }
  }
}

Start with an intentionally vulnerable local target or written-authorized test environment. For real targets, pass safe engagement options such as intensity=safe, strict_scope=true, and respect_rate_limits=true when starting an engagement.

Use Cases

• Run a scoped assessment against a deliberately vulnerable lab app.
• Ask Claude to list available security tools and identify which are installed.
• Plan missing tools for a web, recon, API, cloud, or AD engagement before a human approves installation.
• Launch an authorized web assessment and poll engagement status.
• Retrieve findings, attack chains, reports, and process status for review.
• Use strict scope and rate-limit settings to keep a bug-bounty or staging test inside written rules of engagement.

Safety and Privacy

Pentest AI MCP Server is high-risk offensive security tooling. Do not use it without written authorization, explicit target scope, and clear rules of engagement. Its tools can generate traffic, run scanners, install external security tools, authenticate to applications, test credentials, discover vulnerabilities, validate proofs of concept, and create detailed exploitability evidence.

Use safe intensity, strict scope, and rate-limit-respecting options for real targets. Review every auto-install, active probe, credential test, authenticated scan, and exploit-chain validation step before running it. Keep third-party tools, subprocesses, findings databases, reports, and evidence artifacts in an approved workspace with retention and cleanup controls.

Findings, payloads, screenshots, HTTP data, credentials references, report exports, detection rules, logs, and transcripts can expose serious vulnerabilities or customer data. Protect LLM provider keys, cloud workspace API keys, auth profiles, reports, and generated evidence. Disable cloud sync unless the engagement explicitly allows it.

Duplicate Check

Existing content includes other offensive or security-intelligence MCP entries such as HexStrike AI and CVE MCP Server. Pentest AI MCP Server is distinct because it covers 0xSteph/pentest-ai and the ptai MCP interface for authorized engagements, wrapped external tool execution, tool install planning, security probes, findings databases, attack chains, process controls, and reporting workflows. No dedicated Pentest AI, ptai, or 0xSteph/pentest-ai MCP entry was found in content/mcp.

• Source repositorygithub.com 2026-07-21T07:17:01+00:00
• Documentationgithub.com
• Websitepentestai.xyz
• Submitted by oktofeesh12026-06-06