Pentest requests, security headers checker, guides

com.penetrationtestservices/siteVersion 1.2.0

Request a penetration test, grade a website's HTTP security headers, and search pentest guides.

Status

Responds126 msNov 14, 2026, 14:09 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:09 UTC
Latency: 126 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://penetrationtestservices.com/mcpResponds126 msNov 14, 2026, 14:09 UTC

No sign-in

Claude Code

claude mcp add --transport http site https://penetrationtestservices.com/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: site
Remote MCP server URL: https://penetrationtestservices.com/mcp

Cursor

{
  "mcpServers": {
    "site": {
      "url": "https://penetrationtestservices.com/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"site","type":"http","url":"https://penetrationtestservices.com/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

5 tools

Tools of Pentest requests, security headers checker, guides
	Description		Read-only	Idempotent	Open world
`check_security_headers`Fetch one public web page (one GET per redirect, like a browser visit) and grade its HTTP security headers: HTTPS, HSTS, Content-Security-Policy, clickjacking protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, version disclosure and cookie flags. Reads headers only. This is not a penetration test.	Fetch one public web page (one GET per redirect, like a browser visit) and grade its HTTP security headers: HTTPS, HSTS, Content-Security-Policy, clickjacking protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, version disclosure and cookie flags. Reads headers only. This is not a penetration test.	No	Yes	Yes	Yes
`get_page`Return the Markdown text of a page on penetrationtestservices.com, given its path (for example /guides/).	Return the Markdown text of a page on penetrationtestservices.com, given its path (for example /guides/).	No	Yes	Yes	No
`how_to_contact`Return the form URL and email address a person can use to contact Excession Labs. This tool does not send anything.	Return the form URL and email address a person can use to contact Excession Labs. This tool does not send anything.	No	Yes	Yes	No
`request_pentest`Send a request for a penetration test or an AI application security assessment to Excession Labs on behalf of a person who asked for it. Needs an agent key (POST /agent/auth, then Authorization: Bearer <key>). Excession Labs replies to the person by email to agree scope; testing starts only after a written scope and written authorization from the system owner. Never include passwords, API keys or customer data. Limits: 5 requests a day per key, 3 a day per email address.	Send a request for a penetration test or an AI application security assessment to Excession Labs on behalf of a person who asked for it. Needs an agent key (POST /agent/auth, then Authorization: Bearer <key>). Excession Labs replies to the person by email to agree scope; testing starts only after a written scope and written authorization from the system owner. Never include passwords, API keys or customer data. Limits: 5 requests a day per key, 3 a day per email address.	No	No	No	Yes
`search_site`Search the guides, service pages and research on penetrationtestservices.com. Returns titles, URLs and one-line summaries.	Search the guides, service pages and research on penetrationtestservices.com. Returns titles, URLs and one-line summaries.	No	Yes	Yes	No

Details

Registry status: Active
Published: Nov 10, 2026
Updated: Nov 10, 2026
Website: https://penetrationtestservices.com/developers/⁠ (opens in a new tab)
Repository: https://github.com/Excession-Labs/mcp-servers⁠ (opens in a new tab)
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing