Authorization-gated penetration testing MCP server for agentic AI
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"pentester-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# pentest-mcp [](https://pypi.org/project/pentester-mcp/) [](https://pypi.org/project/pentester-mcp/) [](https://github.com/keselyoleren/pentest-mcp/actions/workflows/ci.yml) [](https://www.python.org/downloads/) [](https://modelcontextprotocol.io) [](LICENSE) <p align="center"> <img src="assets/logo.svg" alt="pentest-mcp logo" width="140"> </p> **Authorization-gated penetration testing for AI agents.** 80 tools for recon, vulnerability scanning, web app testing, exploitation, CTF challenges and reporting — that install into **any MCP-capable agent**: Claude Code, Claude Desktop, Cursor, Windsurf, Cline, Roo Code, Zed, OpenCode, Continue. <p align="center"> <img src="assets/demo.gif" alt="Demo: install, scope gate refusing an out-of-scope target, assessment, report"> </p> Every network-touching tool **refuses to run** without an engagement file that records the client's written authorization and the exact in-scope targets. The gate lives in code, not in a prompt, so no conversation can talk the plugin into testing something it is not allowed to test. ## Capabilities | Area | Tools | | --- | --- | | Engagement & scope | `pentest_load_engagement`, `pentest_scope_check`, `pentest_rules` | | Recon & OSINT | `pentest_recon_dns`, `pentest_recon_whois`, `pentest_recon_subdomains`, `pentest_recon_portscan`, `pentest_recon_tech` | | Advanced OSINT | `pentest_osint_crtsh`, `pentest_osint_wayback`, `pentest_osint_js_secrets`, `pentest_osint_cloud_assets`, `pentest_osint_takeover`, `pentest_osint_shodan` | | Vulnerability scanning | `pentest_vuln_nmap`, `pentest_vuln_nmap_preset`, `pentest…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.