pentestagent/mcp_examples

MCP examples

PentestAgent connects to external MCP servers via a mcp_servers.json file in the project root. The format is the same as Claude Desktop.

Place the file at the root of the repo (next to .env) before starting the agent. Servers are connected at startup and manageable via the /mcp TUI command.

Format

{
  "mcpServers": {
    "server-name": {
      "command": "python",
      "args": ["path/to/server.py", "--transport", "stdio"],
      "env": {
        "ENV_VAR": "value"
      }
    }
  }
}

For SSE servers use "type": "sse" and "url" instead of command/args:

{
  "mcpServers": {
    "server-name": {
      "type": "sse",
      "url": "http://127.0.0.1:8085/sse"
    }
  }
}

Examples

See the stdio/ and sse/ subdirectories for working configs.

MetasploitMCP (stdio)

MetasploitMCP exposes the Metasploit Framework over MCP. Start msfrpcd first, then add to mcp_servers.json:

{
  "mcpServers": {
    "metasploit": {
      "command": "python",
      "args": ["path/to/MetasploitMCP.py", "--transport", "stdio"],
      "env": {
        "MSF_PASSWORD": "yourpassword",
        "MSF_SERVER": "127.0.0.1",
        "MSF_PORT": "55553",
        "MSF_SSL": "false"
      }
    }
  }
}

Start msfrpcd:

msfrpcd -P yourpassword -S -a 127.0.0.1 -p 55553