{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_jbkr8nzsdze4","handle":"pentester-mcp","url":"https://wellknown.network/agents/pentester-mcp","links":{"self":"https://wellknown.network/agents/pentester-mcp/record.json","html":"https://wellknown.network/agents/pentester-mcp","markdown":"https://wellknown.network/agents/pentester-mcp/record.md","api":"https://wellknown.network/api/v1/agents/pentester-mcp","status":"https://wellknown.network/api/v1/agents/pentester-mcp/status","claim":"https://wellknown.network/agents/pentester-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/pentester-mcp/claim.json","badge":"https://wellknown.network/agents/pentester-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/pentester-mcp/history","tools":"https://wellknown.network/api/v1/agents/pentester-mcp/tools"},"ard":{"identifier":"urn:air::server:pentester-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"pentester-mcp","summary":"Authorization-gated penetration testing MCP server for agentic AI","description":"# pentest-mcp\n\n[![PyPI](https://img.shields.io/pypi/v/pentester-mcp)](https://pypi.org/project/pentester-mcp/)\n[![PyPI downloads](https://img.shields.io/pypi/dm/pentester-mcp)](https://pypi.org/project/pentester-mcp/)\n[![CI](https://github.com/keselyoleren/pentest-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/keselyoleren/pentest-mcp/actions/workflows/ci.yml)\n[![Python](https://img.shields.io/badge/python-3.10%2B-blue.svg)](https://www.python.org/downloads/)\n[![MCP](https://img.shields.io/badge/MCP-server-8A63D2)](https://modelcontextprotocol.io)\n[![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)\n\n<p align=\"center\">\n  <img src=\"assets/logo.svg\" alt=\"pentest-mcp logo\" width=\"140\">\n</p>\n\n**Authorization-gated penetration testing for AI agents.** 80 tools for recon,\nvulnerability scanning, web app testing, exploitation, CTF challenges and\nreporting — that install into **any MCP-capable agent**: Claude Code, Claude\nDesktop, Cursor, Windsurf, Cline, Roo Code, Zed, OpenCode, Continue.\n\n<p align=\"center\">\n  <img src=\"assets/demo.gif\" alt=\"Demo: install, scope gate refusing an out-of-scope target, assessment, report\">\n</p>\n\nEvery network-touching tool **refuses to run** without an engagement file that\nrecords the client's written authorization and the exact in-scope targets. The\ngate lives in code, not in a prompt, so no conversation can talk the plugin into\ntesting something it is not allowed to test.\n\n## Capabilities\n\n| Area | Tools |\n| --- | --- |\n| Engagement & scope | `pentest_load_engagement`, `pentest_scope_check`, `pentest_rules` |\n| Recon & OSINT | `pentest_recon_dns`, `pentest_recon_whois`, `pentest_recon_subdomains`, `pentest_recon_portscan`, `pentest_recon_tech` |\n| Advanced OSINT | `pentest_osint_crtsh`, `pentest_osint_wayback`, `pentest_osint_js_secrets`, `pentest_osint_cloud_assets`, `pentest_osint_takeover`, `pentest_osint_shodan` |\n| Vulnerability scanning | `pentest_vuln_nmap`, `pentest_vuln_nmap_preset`, `pentest…","publisher":{"name":"keselyoleren","url":null},"homepage":"https://github.com/keselyoleren/pentest-mcp#readme","repository":"https://github.com/keselyoleren/pentest-mcp#readme","version":"0.4.0","license":"MIT License\n        \n        Copyright (c) 2026 pentest-agent c…","protocols":["mcp"],"tags":["agent","mcp","osint","pentest","security","vulnerability-scanning"],"pricing":null,"endpoints":[{"url":"pypi:pentester-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"derived"},{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"declared"}],"categories":["code","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"pentester-mcp","registry":"pypi","observedAt":"2026-11-05T22:26:27.612Z","publishedAt":"2026-11-03T11:20:06.429551Z","latestVersion":"0.4.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"pentester-mcp","url":"https://pypi.org/project/pentester-mcp/","firstSeenAt":"2026-11-05T22:25:07.129Z","fetchedAt":"2026-11-05T22:25:07.129Z","normalizedAt":"2026-11-05T22:25:07.129Z"}]},"firstSeenAt":"2026-11-05T22:25:07.129Z","updatedAt":"2026-11-05T22:26:27.612Z"}