@turbopentest/mcp-server 0.1.7 → 0.1.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +106 -106
- package/dist/server.js +1 -1
- package/package.json +46 -46
package/README.md
CHANGED
|
@@ -1,106 +1,106 @@
|
|
|
1
|
-
# @turbopentest/mcp-server
|
|
2
|
-
|
|
3
|
-
MCP server for [TurboPentest](https://turbopentest.com) — run AI-powered penetration tests and review findings from your coding assistant.
|
|
4
|
-
|
|
5
|
-
## Setup
|
|
6
|
-
|
|
7
|
-
### 1. Get your API key
|
|
8
|
-
|
|
9
|
-
Create an API key at [turbopentest.com/settings/api-keys](https://turbopentest.com/settings/api-keys).
|
|
10
|
-
|
|
11
|
-
### 2. Add to your MCP client
|
|
12
|
-
|
|
13
|
-
**Claude Desktop** (`claude_desktop_config.json`):
|
|
14
|
-
|
|
15
|
-
```json
|
|
16
|
-
{
|
|
17
|
-
"mcpServers": {
|
|
18
|
-
"turbopentest": {
|
|
19
|
-
"command": "npx",
|
|
20
|
-
"args": ["@turbopentest/mcp-server"],
|
|
21
|
-
"env": {
|
|
22
|
-
"TURBOPENTEST_API_KEY": "tp_live_..."
|
|
23
|
-
}
|
|
24
|
-
}
|
|
25
|
-
}
|
|
26
|
-
}
|
|
27
|
-
```
|
|
28
|
-
|
|
29
|
-
**Claude Code** (`.mcp.json` in your project root):
|
|
30
|
-
|
|
31
|
-
```json
|
|
32
|
-
{
|
|
33
|
-
"mcpServers": {
|
|
34
|
-
"turbopentest": {
|
|
35
|
-
"command": "npx",
|
|
36
|
-
"args": ["@turbopentest/mcp-server"],
|
|
37
|
-
"env": {
|
|
38
|
-
"TURBOPENTEST_API_KEY": "tp_live_..."
|
|
39
|
-
}
|
|
40
|
-
}
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
```
|
|
44
|
-
|
|
45
|
-
**Cursor** (Settings > MCP Servers > Add):
|
|
46
|
-
|
|
47
|
-
```json
|
|
48
|
-
{
|
|
49
|
-
"command": "npx",
|
|
50
|
-
"args": ["@turbopentest/mcp-server"],
|
|
51
|
-
"env": {
|
|
52
|
-
"TURBOPENTEST_API_KEY": "tp_live_..."
|
|
53
|
-
}
|
|
54
|
-
}
|
|
55
|
-
```
|
|
56
|
-
|
|
57
|
-
## Tools
|
|
58
|
-
|
|
59
|
-
| Tool
|
|
60
|
-
|
|
|
61
|
-
| `
|
|
62
|
-
| `
|
|
63
|
-
| `
|
|
64
|
-
| `
|
|
65
|
-
| `
|
|
66
|
-
| `
|
|
67
|
-
| `
|
|
68
|
-
| `
|
|
69
|
-
|
|
70
|
-
## Scan Tiers
|
|
71
|
-
|
|
72
|
-
| Tier | Agents | Duration | Price |
|
|
73
|
-
| -------- | ------ | -------- | ----- |
|
|
74
|
-
| Recon | 1 | 30 min | $49 |
|
|
75
|
-
| Standard | 4 | 1 hour | $99 |
|
|
76
|
-
| Deep | 10 | 2 hours | $299 |
|
|
77
|
-
| Blitz | 20 | 4 hours | $699 |
|
|
78
|
-
|
|
79
|
-
## Example
|
|
80
|
-
|
|
81
|
-
```
|
|
82
|
-
You: "Run a pentest on staging.example.com"
|
|
83
|
-
Claude: Calls
|
|
84
|
-
|
|
85
|
-
You: "How's it going?"
|
|
86
|
-
Claude: Calls
|
|
87
|
-
|
|
88
|
-
You: "Show me the high severity findings"
|
|
89
|
-
Claude: Calls
|
|
90
|
-
```
|
|
91
|
-
|
|
92
|
-
## Configuration
|
|
93
|
-
|
|
94
|
-
| Environment Variable | Description | Default |
|
|
95
|
-
| ---------------------- | ------------------------------------ | ------------------------------ |
|
|
96
|
-
| `TURBOPENTEST_API_KEY` | Your TurboPentest API key (required) | — |
|
|
97
|
-
| `TURBOPENTEST_API_URL` | Custom API base URL (for testing) | `https://turbopentest.com/api` |
|
|
98
|
-
|
|
99
|
-
## Requirements
|
|
100
|
-
|
|
101
|
-
- Node.js 18+
|
|
102
|
-
- A [TurboPentest](https://turbopentest.com) account with API access
|
|
103
|
-
|
|
104
|
-
## License
|
|
105
|
-
|
|
106
|
-
MIT
|
|
1
|
+
# @turbopentest/mcp-server
|
|
2
|
+
|
|
3
|
+
MCP server for [TurboPentest](https://turbopentest.com) — run AI-powered penetration tests and review findings from your coding assistant.
|
|
4
|
+
|
|
5
|
+
## Setup
|
|
6
|
+
|
|
7
|
+
### 1. Get your API key
|
|
8
|
+
|
|
9
|
+
Create an API key at [turbopentest.com/settings/api-keys](https://turbopentest.com/settings/api-keys).
|
|
10
|
+
|
|
11
|
+
### 2. Add to your MCP client
|
|
12
|
+
|
|
13
|
+
**Claude Desktop** (`claude_desktop_config.json`):
|
|
14
|
+
|
|
15
|
+
```json
|
|
16
|
+
{
|
|
17
|
+
"mcpServers": {
|
|
18
|
+
"turbopentest": {
|
|
19
|
+
"command": "npx",
|
|
20
|
+
"args": ["@turbopentest/mcp-server"],
|
|
21
|
+
"env": {
|
|
22
|
+
"TURBOPENTEST_API_KEY": "tp_live_..."
|
|
23
|
+
}
|
|
24
|
+
}
|
|
25
|
+
}
|
|
26
|
+
}
|
|
27
|
+
```
|
|
28
|
+
|
|
29
|
+
**Claude Code** (`.mcp.json` in your project root):
|
|
30
|
+
|
|
31
|
+
```json
|
|
32
|
+
{
|
|
33
|
+
"mcpServers": {
|
|
34
|
+
"turbopentest": {
|
|
35
|
+
"command": "npx",
|
|
36
|
+
"args": ["@turbopentest/mcp-server"],
|
|
37
|
+
"env": {
|
|
38
|
+
"TURBOPENTEST_API_KEY": "tp_live_..."
|
|
39
|
+
}
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
```
|
|
44
|
+
|
|
45
|
+
**Cursor** (Settings > MCP Servers > Add):
|
|
46
|
+
|
|
47
|
+
```json
|
|
48
|
+
{
|
|
49
|
+
"command": "npx",
|
|
50
|
+
"args": ["@turbopentest/mcp-server"],
|
|
51
|
+
"env": {
|
|
52
|
+
"TURBOPENTEST_API_KEY": "tp_live_..."
|
|
53
|
+
}
|
|
54
|
+
}
|
|
55
|
+
```
|
|
56
|
+
|
|
57
|
+
## Tools
|
|
58
|
+
|
|
59
|
+
| Tool | Description |
|
|
60
|
+
| --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- |
|
|
61
|
+
| `turbopentest_start_pentest` | Launch a pentest against a verified domain. Supports recon/standard/deep/blitz tiers and optional GitHub repo for white-box scanning. |
|
|
62
|
+
| `turbopentest_get_pentest` | Get full pentest details: status, progress, findings summary, executive summary, attack surface map, STRIDE threat model. |
|
|
63
|
+
| `turbopentest_list_pentests` | List all your pentests with status and finding counts. Filter by status, limit results. |
|
|
64
|
+
| `turbopentest_get_findings` | Get structured vulnerability findings with severity, CVSS, CWE, PoC, remediation, and retest commands. Filter by severity. |
|
|
65
|
+
| `turbopentest_download_report` | Download a pentest report as markdown (best for AI), JSON, or PDF. |
|
|
66
|
+
| `turbopentest_get_credits` | Check your credit balance and available scan tiers with pricing. |
|
|
67
|
+
| `turbopentest_verify_attestation` | Verify a blockchain-anchored pentest attestation by hash (public, no API key required). |
|
|
68
|
+
| `turbopentest_list_domains` | List your verified domains and their verification status. |
|
|
69
|
+
|
|
70
|
+
## Scan Tiers
|
|
71
|
+
|
|
72
|
+
| Tier | Agents | Duration | Price |
|
|
73
|
+
| -------- | ------ | -------- | ----- |
|
|
74
|
+
| Recon | 1 | 30 min | $49 |
|
|
75
|
+
| Standard | 4 | 1 hour | $99 |
|
|
76
|
+
| Deep | 10 | 2 hours | $299 |
|
|
77
|
+
| Blitz | 20 | 4 hours | $699 |
|
|
78
|
+
|
|
79
|
+
## Example
|
|
80
|
+
|
|
81
|
+
```
|
|
82
|
+
You: "Run a pentest on staging.example.com"
|
|
83
|
+
Claude: Calls turbopentest_start_pentest → "Started pentest tp_abc123, 4 agents, ~1 hour"
|
|
84
|
+
|
|
85
|
+
You: "How's it going?"
|
|
86
|
+
Claude: Calls turbopentest_get_pentest → "60% complete, 3 findings so far (1 high, 2 medium)"
|
|
87
|
+
|
|
88
|
+
You: "Show me the high severity findings"
|
|
89
|
+
Claude: Calls turbopentest_get_findings(severity: "high") → Shows SQL injection details with PoC and remediation
|
|
90
|
+
```
|
|
91
|
+
|
|
92
|
+
## Configuration
|
|
93
|
+
|
|
94
|
+
| Environment Variable | Description | Default |
|
|
95
|
+
| ---------------------- | ------------------------------------ | ------------------------------ |
|
|
96
|
+
| `TURBOPENTEST_API_KEY` | Your TurboPentest API key (required) | — |
|
|
97
|
+
| `TURBOPENTEST_API_URL` | Custom API base URL (for testing) | `https://turbopentest.com/api` |
|
|
98
|
+
|
|
99
|
+
## Requirements
|
|
100
|
+
|
|
101
|
+
- Node.js 18+
|
|
102
|
+
- A [TurboPentest](https://turbopentest.com) account with API access
|
|
103
|
+
|
|
104
|
+
## License
|
|
105
|
+
|
|
106
|
+
MIT
|
package/dist/server.js
CHANGED
|
@@ -10,7 +10,7 @@ import { registerListDomains } from "./tools/list-domains.js";
|
|
|
10
10
|
export function createServer(client) {
|
|
11
11
|
const server = new McpServer({
|
|
12
12
|
name: "turbopentest",
|
|
13
|
-
version: "0.1.
|
|
13
|
+
version: "0.1.8",
|
|
14
14
|
});
|
|
15
15
|
registerStartPentest(server, client);
|
|
16
16
|
registerGetPentest(server, client);
|
package/package.json
CHANGED
|
@@ -1,46 +1,46 @@
|
|
|
1
|
-
{
|
|
2
|
-
"name": "@turbopentest/mcp-server",
|
|
3
|
-
"version": "0.1.
|
|
4
|
-
"description": "MCP server for TurboPentest — AI-powered penetration testing from your coding assistant",
|
|
5
|
-
"type": "module",
|
|
6
|
-
"main": "dist/index.js",
|
|
7
|
-
"bin": {
|
|
8
|
-
"turbopentest-mcp": "dist/index.js"
|
|
9
|
-
},
|
|
10
|
-
"files": [
|
|
11
|
-
"dist"
|
|
12
|
-
],
|
|
13
|
-
"scripts": {
|
|
14
|
-
"build": "tsc",
|
|
15
|
-
"dev": "tsx src/index.ts",
|
|
16
|
-
"prepublishOnly": "npm run build"
|
|
17
|
-
},
|
|
18
|
-
"keywords": [
|
|
19
|
-
"mcp",
|
|
20
|
-
"model-context-protocol",
|
|
21
|
-
"pentest",
|
|
22
|
-
"security",
|
|
23
|
-
"turbopentest",
|
|
24
|
-
"ai"
|
|
25
|
-
],
|
|
26
|
-
"author": "IntegSec Inc.",
|
|
27
|
-
"license": "MIT",
|
|
28
|
-
"mcpName": "io.github.integsec/turbopentest",
|
|
29
|
-
"repository": {
|
|
30
|
-
"type": "git",
|
|
31
|
-
"url": "https://github.com/integsec/turbopentest-mcp.git"
|
|
32
|
-
},
|
|
33
|
-
"homepage": "https://turbopentest.com",
|
|
34
|
-
"engines": {
|
|
35
|
-
"node": ">=18.0.0"
|
|
36
|
-
},
|
|
37
|
-
"dependencies": {
|
|
38
|
-
"@modelcontextprotocol/sdk": "^1.26.0",
|
|
39
|
-
"zod": "^4.3.6"
|
|
40
|
-
},
|
|
41
|
-
"devDependencies": {
|
|
42
|
-
"@types/node": "^25.3.5",
|
|
43
|
-
"tsx": "^4.19.0",
|
|
44
|
-
"typescript": "^5.7.0"
|
|
45
|
-
}
|
|
46
|
-
}
|
|
1
|
+
{
|
|
2
|
+
"name": "@turbopentest/mcp-server",
|
|
3
|
+
"version": "0.1.8",
|
|
4
|
+
"description": "MCP server for TurboPentest — AI-powered penetration testing from your coding assistant",
|
|
5
|
+
"type": "module",
|
|
6
|
+
"main": "dist/index.js",
|
|
7
|
+
"bin": {
|
|
8
|
+
"turbopentest-mcp": "dist/index.js"
|
|
9
|
+
},
|
|
10
|
+
"files": [
|
|
11
|
+
"dist"
|
|
12
|
+
],
|
|
13
|
+
"scripts": {
|
|
14
|
+
"build": "tsc",
|
|
15
|
+
"dev": "tsx src/index.ts",
|
|
16
|
+
"prepublishOnly": "npm run build"
|
|
17
|
+
},
|
|
18
|
+
"keywords": [
|
|
19
|
+
"mcp",
|
|
20
|
+
"model-context-protocol",
|
|
21
|
+
"pentest",
|
|
22
|
+
"security",
|
|
23
|
+
"turbopentest",
|
|
24
|
+
"ai"
|
|
25
|
+
],
|
|
26
|
+
"author": "IntegSec Inc.",
|
|
27
|
+
"license": "MIT",
|
|
28
|
+
"mcpName": "io.github.integsec/turbopentest",
|
|
29
|
+
"repository": {
|
|
30
|
+
"type": "git",
|
|
31
|
+
"url": "https://github.com/integsec/turbopentest-mcp.git"
|
|
32
|
+
},
|
|
33
|
+
"homepage": "https://turbopentest.com",
|
|
34
|
+
"engines": {
|
|
35
|
+
"node": ">=18.0.0"
|
|
36
|
+
},
|
|
37
|
+
"dependencies": {
|
|
38
|
+
"@modelcontextprotocol/sdk": "^1.26.0",
|
|
39
|
+
"zod": "^4.3.6"
|
|
40
|
+
},
|
|
41
|
+
"devDependencies": {
|
|
42
|
+
"@types/node": "^25.3.5",
|
|
43
|
+
"tsx": "^4.19.0",
|
|
44
|
+
"typescript": "^5.7.0"
|
|
45
|
+
}
|
|
46
|
+
}
|