PentestGPT-MCP
PentestGPT-MCP is an MCP server, listed under model apis. It reaches google and openai. It needs GOOGLE_API_KEY and OPENAI_API_KEY to authenticate. Its repository has 18 GitHub stars; we last read it on 2026-10-25.
An automated pentesting agent that thinks with an LLM and acts with MCP.
Install
MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. PentestGPT-MCP’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.
What it reaches, and what it needs
Maintenance
An automated pentesting agent that thinks with an LLM and acts with MCP.
PentestGPT-MCP compared with similar servers
| Server | Reaches | Needs | Stars | Last update | Licence |
|---|---|---|---|---|---|
| PentestGPT-MCP (this page) | google, openai | GOOGLE_API_KEY, OPENAI_API_KEY | 18 | 2025-08-05 | — |
| paperbanana | atlascloud, google, openai(2 shared) | ATLASCLOUD_API_KEY, GOOGLE_API_KEY, OPENAI_API_KEY | 2,412 | 2026-09-17 | MIT |
| agent-fleet-o | anthropic, google, openai, typesafe(2 shared) | ANTHROPIC_API_KEY, DB_PASSWORD, GOOGLE_AI_API_KEY, OPENAI_API_KEY, OP_SERVICE_ACCOUNT_TOKEN, TYPESAFE_API_KEY | 76 | 2026-10-20 | AGPL-3.0 |
| Promptheus | anthropic, google, openai(2 shared) | ANTHROPIC_API_KEY, GOOGLE_API_KEY, OPENAI_API_KEY | 17 | 2026-10-13 | MIT |
| ms-365-mcp-server | ms365, openai(1 shared) | MS365_MCP_ATTACHMENT_URL_KEY, MS365_MCP_CLIENT_SECRET, MS365_MCP_OAUTH_TOKEN, OPENAI_API_KEY | 1,068 | 2026-10-23 | MIT |
| just-prompt | anthropic, deepseek, gemini, groq, openai(1 shared) | ANTHROPIC_API_KEY, DEEPSEEK_API_KEY, GEMINI_API_KEY, GROQ_API_KEY, OPENAI_API_KEY | 739 | 2025-08-10 | — |
Ranked by services in common with PentestGPT-MCP, then by stars. Figures are from each repository when we last read it.
Common questions about PentestGPT-MCP
- What does PentestGPT-MCP do?
- An automated pentesting agent that thinks with an LLM and acts with MCP.
- How do I install PentestGPT-MCP?
- Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/yuhano/PentestGPT-MCP
- What does PentestGPT-MCP connect to, and what does it need?
- It reaches google and openai. The credentials we found in its source are GOOGLE_API_KEY and OPENAI_API_KEY.
- Is PentestGPT-MCP official and is it maintained?
- We found nothing naming it as a vendor’s official server. Its repository has 18 GitHub stars and its state in our directory is stale. Its last commit we recorded was on 2025-08-05.
- What licence does PentestGPT-MCP use?
- The repository metadata we read does not state a licence, so check the repository before you rely on it.
More MCP servers for model apis
- wigolo5,498 stars
- KiCAD-MCP-Server2,905 stars
- modelcontextprotocol2,589 stars
- paperbanana2,412 stars
- gemini-mcp-tool2,294 stars
- telegram-mcp1,879 stars