io.github.cyanheads/pentest-mcp-server

MCPcommunity
v0.1.5io.github.cyanheadsUnknownUpdated 20d agonpmGitHub

Offline methodology engine for authorized penetration testing, CTF, and security research.

@cyanheads/pentest-mcp-server Offline methodology engine and payload workshop for authorized penetration testing, CTF, security research, and education via MCP. STDIO or Streamable HTTP. [](./CHANGELOG.md) [](./LICENSE) []( []( []( []( []( Public Hosted Server: Authorized use only. This server is designed for penetration testers, red teamers, CTF players, security researchers, and students…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
20d agoLast update
Package
Authorio.github.cyanheads
LicenseUnknown
Version0.1.5
Sourcemcp-registry
npm@cyanheads/pentest-mcp-server
GitHubcyanheads/pentest-mcp-server
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/25
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/10
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
—npm provenance (Sigstore)+0/5
→ Publish from GitHub Actions with the --provenance flag
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface1 tool · none privileged
Security scan✓ Cleanv0.1.5 · 20d ago
EvalsNone
IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

@cyanheads/pentest-mcp-server Offline methodology engine and payload workshop for authorized penetration testing, CTF, security research, and education via MCP. STDIO or Streamable HTTP. [](./CHANGELOG.md) [](./LICENSE) []( []( []( []( []( Public Hosted Server: Authorized use only. This server is designed for penetration testers, red teamers, CTF players, security researchers, and students working on systems they own or have explicit written authorization to test. Users are solely responsible…

Keywords
mcp