pentest-ai MCP Server
0xSteph/pentest-ai
[](https://agentrank-ai.com/tool/0xSteph--pentest-ai/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
0xSteph/pentest-ai is a Python tool licensed under MIT. Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself. Topics: ai-security, bug-bounty, claude, ctf, cybersecurity, hacking-tools, mcp, model-context-protocol, offensive-security, penetration-testing, pentesting, python, red-team, security, vulnerability-scanner, ai-penetration-testing, ai-pentesting, appsec, devsecops, ethical-hacking.
Ranked #3987 out of 24846 indexed tools.
Has 1,734 GitHub stars.
Ecosystem
Score Breakdown
1,734 stars → well-known project
Last commit 1mo ago → moderate activity
7/10 issues closed → decent issue management
1 contributor → solo project
No dependents → no downstream usage
9 weekly installs → early adoption
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Matched Queries
From the README
[Website](https://pentestai.xyz/) · [Quick start](#quick-start) · [Verification](#how-verification-works) · [Documentation](https://github.com/0xSteph/pentest-ai/tree/main/docs) · [Issues](https://github.com/0xSteph/pentest-ai/issues) Pentest-AI connects an AI client or model to a penetration-testing workflow. It investigates applications, records findings, and uses **machine oracles to check whether an exploit can be reproduced**. Verified findings carry evidence you can replay. Use it through **MCP**, from the **CLI**, or in **CI**. The model helps drive the investigation; an oracle determines whether a finding earns a verified verdict. > Test only systems you own or have explicit authorization to assess. Read the [acceptable-use policy](https://pentestai.xyz/aup) and [terms](https://pentestai.xyz/terms) before running an engagement. ## Quick start ### Recommended: Codex or Claude Code Use Python **3.10–3.14** and install [pipx](https://pipx.pypa.io/stable/installation/) first.Read full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.