Turbopentest

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/integsec-turbopentest

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

11 read · 1 write · 0 delete

Secrets

1 (API keys, tokens or passwords)

Install scripts

Not scanned yet

Runs as

Node.js package

Tools (12)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• turbopentest_download_reportDownload Pentest Reportread-only

  Download a full penetration test report in the specified format. The scan must have status 'complete' before a report can be generated. Use format 'markdown' for AI-readable analysis, 'json' for structured programmatic data, or 'pdf' for a professionally formatted document suitable for stakeholders.

• turbopentest_get_creditsGet Credit Balanceread-only

  Check your current credit balance, usage breakdown by tier, and available scan tiers with pricing. Credits are consumed when launching penetration tests — each tier costs one credit of the matching type. Call this before turbopentest_start_pentest to verify you have sufficient credits for the desired tier.

• turbopentest_get_findingsGet Vulnerability Findingsread-only

  Retrieve structured vulnerability findings for a completed penetration test. Each finding includes severity, CVSS score, CWE classification, detailed description, proof of concept, remediation steps, and a retest command. Returns up to 20 findings at a time — use the severity filter to focus on specific risk levels. Use turbopentest_download_report for a complete exportable report.

• turbopentest_get_pentestGet Penetration Test Detailsread-only

  Retrieve full details for a specific penetration test by its ID. Returns current status, scan progress percentage, findings summary by severity, executive summary, attack surface map, and STRIDE threat model. Use this to monitor a running scan or review completed results. For detailed vulnerability data, follow up with turbopentest_get_findings.

• turbopentest_list_domainsList Verified Domainsread-only

  List all domains in your account with their verification status and expiry dates. A domain must have status 'verified' before it can be used as a target in turbopentest_start_pentest. To verify a new domain, add a DNS TXT record via the TurboPentest dashboard at turbopentest.com/domains.

• turbopentest_list_pentestsList Penetration Testsread-only

  List all your penetration tests with their status and finding counts, ordered newest first. Use this to find pentest IDs, check which scans are running, or review past results. Supports filtering by status and limiting result count. Use turbopentest_get_pentest with a specific ID for full details.

• turbopentest_start_pentestStart Penetration Test

  Launch an AI-powered penetration test against a target URL. The target domain must be verified first — this tool checks turbopentest_list_domains itself and will refuse (isError) to launch against an unverified domain, so there is no need to bypass this check. Requires an available credit matching the selected tier — use turbopentest_get_credits to check balance. Returns a pentest ID that can be used with turbopentest_get_pentest to monitor progress.

• turbopentest_verify_attestationVerify Pentest Attestationread-only

  Verify a blockchain-anchored penetration test attestation by its SHA-256 hash. Returns scan metadata (tier, agents, duration, risk score, finding summary) and blockchain proof (chain ID, transaction hash, block number, merkle root) if anchored. This is a public endpoint — no API key is required. Use this to independently confirm that a pentest was performed and its results are tamper-proof.

• turbopentest_workflow_analyze_findingsWorkflow: Analyze Findingsread-only

  Returns step-by-step instructions for producing a prioritized remediation plan from a completed pentest's findings. Use this in MCP clients (like Codex) that don't support the 'analyze_findings' MCP prompt directly.

• turbopentest_workflow_compare_pentestsWorkflow: Compare Pentestsread-only

  Returns step-by-step instructions for diffing two pentests on the same target to show what's new, fixed, and persistent. Use this in MCP clients (like Codex) that don't support the 'compare_pentests' MCP prompt directly.

• turbopentest_workflow_run_pentestWorkflow: Run Pentestread-only

  Returns step-by-step instructions for running a full-lifecycle pentest against a target: domain verification, credit check, launch, progress monitoring, findings summary, and report offer. Use this in MCP clients (like Codex) that don't support the 'run_pentest' MCP prompt directly.

• turbopentest_workflow_security_postureWorkflow: Security Postureread-only

  Returns step-by-step instructions for producing an executive security posture briefing across the 5 most recent pentests. Use this in MCP clients (like Codex) that don't support the 'security_posture' MCP prompt directly.

Signals

Stars

0

Forks

0

Open issues

0

Last commit

Oct 21, 2026 (8 days ago)

Last release

Oct 21, 2026 (8 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.github.integsec/turbopentest

Version

0.1.5

Auth

API key

Packages

npm @turbopentest/mcp-server

License

MIT

Repository

github.com/integsec/turbopentest-mcp

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql