Turbopentest
Launch TurboPentest scans from your agent, review findings, and pull reports without leaving the MCP session.
Overview
TurboPentest MCP is a Ship-phase MCP server that lets your agent launch AI-powered penetration tests, review findings, and download reports via TurboPentest’s API.
What is this MCP server?
- AI-powered penetration testing orchestration via MCP
- Launch scans, review findings, and download reports through agent tools
- npm @turbopentest/mcp-server v0.1.5 with required TURBOPENTEST_API_KEY
- Optional TURBOPENTEST_API_URL override (default https://turbopentest.com/api)
- stdio transport suited for Claude Code and Cursor registration
- Server version 0.1.5 on npm @turbopentest/mcp-server
- Default API base https://turbopentest.com/api (overridable via TURBOPENTEST_API_URL)
- stdio transport with required secret TURBOPENTEST_API_KEY
What problem does it solve?
Manual pentest portals break agent-centric shipping flows, so security validation gets skipped until after deploy.
Who is it for?
Solo builders with authorized staging targets who want agent-driven pentest runs and report retrieval before launch.
Skip if: Builders who cannot use third-party offensive security SaaS or lack explicit permission to scan their targets.
What do I get? / Deliverables
You can trigger TurboPentest scans and consume findings and reports from the agent during pre-release security work.
- Initiated TurboPentest scans with agent-accessible status and findings
- Downloadable penetration test reports via MCP tool flows
Recommended MCP Servers
Journey fit
How it compares
Cloud pentest orchestration MCP, not a local DAST script or static MCP install-time audit like Inkog.
Common Questions / FAQ
Who is TurboPentest MCP for?
Developers shipping web apps or APIs who use TurboPentest and want scan control and findings review inside Claude Code, Cursor, or Codex.
When should I use TurboPentest MCP?
Use it in Ship security on staging or pre-production URLs after features stabilize and before distribution or public launch.
How do I add TurboPentest MCP to my agent?
Install @turbopentest/mcp-server from npm, set TURBOPENTEST_API_KEY, optionally TURBOPENTEST_API_URL, and add the stdio server to your MCP client.