Pentest-Tools MCP: scans, findings and reports from your AI app

Pentest-Tools.com's MCP server lets your AI app run security scans and manage the findings and reports that come out of them. ContextGate connects it to Claude, ChatGPT and Cursor with an API key from your Pentest-Tools account, and because a scan hits a real target, you can switch off the scan tools or have a policy warn before one starts.

  • Ready to connect
  • Free

Set up Pentest-Tools.com scans in Claude, ChatGPT or Cursor

  1. 1Click Connect Pentest-Tools free and paste an API key from your Pentest-Tools.com account.
  2. 2All tools are on after the key is accepted. Reading findings and reports is low risk; starting a scan sends traffic to a target, so switch off the scan tools if scans should only be started by a person.
  3. 3Add ContextGate to your AI app as a connector or MCP server. The steps for each app are on the Works with page.
  4. 4Ask your AI app to summarize the findings from your last scan, then check Activity for the call.

Security work from your AI app

  • Run a scan from a chat.
  • Go through findings and ask for a plain-language summary.
  • Manage findings as you work through them.
  • Pull a report to share with a client or your team.

Scans only when you say so

  • Switch off the scan tools; your AI app won't see them and calls to them are refused.
  • Use a policy to warn or block before a scan starts.
  • Activity records every scan, finding and report call.

What you get with Pentest-Tools and ContextGate

  • Your AI apps can use Pentest-ToolsClaude, Cursor, ChatGPT and other AI apps reach Pentest-Tools through the one ContextGate connection you add to them.
  • You choose which tools they can useSwitch off any Pentest-Tools tool you don't want used. It's hidden from your AI apps and refused if called.
  • Every call is checked and recordedYour policies check each call (for example, personal data is hidden and secrets are blocked), and Activity keeps a record of it.

ContextGate sees only the tool calls that go through it, not your AI app's built-in tools or your chats.

Pentest-Tools tools

Pentest-Tools's own MCP server shows its tools once you sign in. When you connect it, they are listed and synced in your workspace.