GEMMA-by-GOOGLE

GEMMA-by-GOOGLE is an MCP server, listed under security. Its repository has 9 GitHub stars and is licensed under MIT; we last read it on 2026-10-23.

Gemma-by-Google is a fully local AI penetration-testing agent that runs recon, attack loops, and report generation autonomously using Gemma 4-12B. It does not require cloud connectivity or API keys and is intended for authorized security testing.

MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. GEMMA-by-GOOGLE’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.

Ranked by services in common with GEMMA-by-GOOGLE, then by stars. Figures are from each repository when we last read it.

What does GEMMA-by-GOOGLE do?

Gemma-by-Google is a fully local AI penetration-testing agent that runs recon, attack loops, and report generation autonomously using Gemma 4-12B. It does not require cloud connectivity or API keys and is intended for authorized security testing.

How do I install GEMMA-by-GOOGLE?

Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/XenoCoreGiger31/GEMMA-by-GOOGLE

Is GEMMA-by-GOOGLE official and is it maintained?

We found nothing naming it as a vendor’s official server. Its repository has 9 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-08-18.

What licence does GEMMA-by-GOOGLE use?

The repository declares the MIT licence.

• ida-pro-mcp13,080 stars
• mcp-shodan178 stars
• mcp-server-idapro103 stars
• search-solodit-mcp42 stars
• opencti-mcp40 stars
• MalwareBazaar_MCP30 stars

All security entries →

• Introduction to Model Context Protocol (Claude Academy)
• The Hugging Face MCP course
• Build an AI agent: a path with skills and MCP servers to practise on