# agentic-pentest-proxy MCP server

> Enforces penetration testing engagement scope for AI agents by validating MCP tool calls against approved targets, techniques, and time windows.

- Repository: https://github.com/IntegSec/agentic-pentest-proxy
- Page: https://hostedmcp.org/servers/integsec/agentic-pentest-proxy
- Transport: stdio
- Stars: 9
- License: Apache-2.0

## Install

### Claude Code

```sh
claude mcp add agentic-pentest-proxy -- npx -y @integsec/agentic-pentest-proxy
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "agentic-pentest-proxy": {
      "command": "npx",
      "args": [
        "-y",
        "@integsec/agentic-pentest-proxy"
      ]
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "agentic-pentest-proxy": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@integsec/agentic-pentest-proxy"
      ]
    }
  }
}
```

### VS Code CLI

```sh
code --add-mcp '{"name":"agentic-pentest-proxy","type":"stdio","command":"npx","args":["-y","@integsec/agentic-pentest-proxy"]}'
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "agentic-pentest-proxy": {
      "command": "npx",
      "args": [
        "-y",
        "@integsec/agentic-pentest-proxy"
      ]
    }
  }
}
```

### Codex

```sh
codex mcp add agentic-pentest-proxy -- npx -y @integsec/agentic-pentest-proxy
```

### Codex config.toml (`~/.codex/config.toml`)

```toml
[mcp_servers.agentic-pentest-proxy]
command = "npx"
args = ["-y", "@integsec/agentic-pentest-proxy"]
```

### Gemini CLI

```sh
gemini mcp add -s user agentic-pentest-proxy npx -- -y @integsec/agentic-pentest-proxy
```

### Gemini settings.json (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "agentic-pentest-proxy": {
      "command": "npx",
      "args": [
        "-y",
        "@integsec/agentic-pentest-proxy"
      ]
    }
  }
}
```

## Environment variables

| Name | Required | Secret | Description |
|---|---|---|---|
| `AUDIT_LOG_PATH` | no | no |  |
| `MCP_TRANSPORT` | no | no |  |
| `SCOPE_MANIFEST_PATH` | no | no |  |
| `UPSTREAM_MCP_ARGS_JSON` | no | no |  |
| `UPSTREAM_MCP_COMMAND` | no | no |  |

## FAQ

### What does the proxy actually check?

It inspects MCP tool call arguments to block unknown target-bearing arguments, out-of-scope targets, restricted techniques, and expired engagement windows.

### Can the proxy prevent an agent from bypassing checks via a separate shell?

No, the gateway cannot prevent an agent with a separate shell or network path from bypassing the MCP checks.

### What types of MCP tool connections are supported?

The proxy supports stdio tools, SSE upstreams (like Burp Suite), and HTTP upstreams.