Skip to content
InfratoApp
InfratoApp / Resources / MCP servers / PentestGPT-MCP

PentestGPT-MCP

PentestGPT-MCP is an MCP server, listed under model apis. It reaches google and openai. It needs GOOGLE_API_KEY and OPENAI_API_KEY to authenticate. Its repository has 18 GitHub stars; we last read it on 2026-10-25.

An automated pentesting agent that thinks with an LLM and acts with MCP.

Install

MCP servers are packaged differently from each other -- some run via npx, some as a Docker image, some as a plain script you clone and run. PentestGPT-MCP’s own README did not state one plainly enough for this page to quote it rather than guess, so it will not guess. The repository below states it.

What it reaches, and what it needs

Reaches
google, openai
Credential
GOOGLE_API_KEY, OPENAI_API_KEY

Maintenance

Stars
18
State
stale
Licence
—
From the repository

An automated pentesting agent that thinks with an LLM and acts with MCP.

PentestGPT-MCP compared with similar servers

PentestGPT-MCP compared with the closest alternatives, by services reached, credentials, stars, last update and licence
ServerReachesNeedsStarsLast updateLicence
PentestGPT-MCP (this page)google, openaiGOOGLE_API_KEY, OPENAI_API_KEY182025-08-05—
paperbananaatlascloud, google, openai(2 shared)ATLASCLOUD_API_KEY, GOOGLE_API_KEY, OPENAI_API_KEY2,4122026-09-17MIT
agent-fleet-oanthropic, google, openai, typesafe(2 shared)ANTHROPIC_API_KEY, DB_PASSWORD, GOOGLE_AI_API_KEY, OPENAI_API_KEY, OP_SERVICE_ACCOUNT_TOKEN, TYPESAFE_API_KEY762026-10-20AGPL-3.0
Promptheusanthropic, google, openai(2 shared)ANTHROPIC_API_KEY, GOOGLE_API_KEY, OPENAI_API_KEY172026-10-13MIT
ms-365-mcp-serverms365, openai(1 shared)MS365_MCP_ATTACHMENT_URL_KEY, MS365_MCP_CLIENT_SECRET, MS365_MCP_OAUTH_TOKEN, OPENAI_API_KEY1,0682026-10-23MIT
just-promptanthropic, deepseek, gemini, groq, openai(1 shared)ANTHROPIC_API_KEY, DEEPSEEK_API_KEY, GEMINI_API_KEY, GROQ_API_KEY, OPENAI_API_KEY7392025-08-10—

Ranked by services in common with PentestGPT-MCP, then by stars. Figures are from each repository when we last read it.

Common questions about PentestGPT-MCP

What does PentestGPT-MCP do?
An automated pentesting agent that thinks with an LLM and acts with MCP.
How do I install PentestGPT-MCP?
Its README did not state an install command plainly enough for us to quote one, so we do not guess. The repository has the instructions: https://github.com/yuhano/PentestGPT-MCP
What does PentestGPT-MCP connect to, and what does it need?
It reaches google and openai. The credentials we found in its source are GOOGLE_API_KEY and OPENAI_API_KEY.
Is PentestGPT-MCP official and is it maintained?
We found nothing naming it as a vendor’s official server. Its repository has 18 GitHub stars and its state in our directory is stale. Its last commit we recorded was on 2025-08-05.
What licence does PentestGPT-MCP use?
The repository metadata we read does not state a licence, so check the repository before you rely on it.

More MCP servers for model apis

All model apis entries →

Learn this on Infrato