pentester4codex

MCP stdio server wrapper for PentestAgent tools. Props to GH05TCREW (MIT) for PentestAgent.

Original project:

https://github.com/GH05TCREW/pentestagent

What You Get

This package exposes PentestAgent tools over MCP stdio so any MCP client (like Codex) can call them. It does not install PentestAgent for you.

Prerequisites (Required)

1. Python 3.10+
2. PentestAgent installed (from GH05TCREW/pentestagent)

Install PentestAgent from source:

git clone https://github.com/GH05TCREW/pentestagent
cd pentestagent
python3 -m venv .venv
. .venv/bin/activate
python3 -m pip install -e ".[all]"

Verify:

. .venv/bin/activate
pentestagent --help

Install (This Package)

npm i -g pentester4codex

Verify:

pentester4codex --help

Start The MCP Server

pentester4codex --timeout 300

Optional:

• --docker runs tools inside Docker (requires Docker).

Codex Setup (Plug‑In)

Recommended (Codex CLI):

codex mcp add pentester4codex /path/to/pentestagent/.venv/bin/python -m pentestagent.mcp.tools_server --timeout 300

Replace /path/to/pentestagent with your local clone. Example:

codex mcp add pentester4codex /Users/native/Desktop/coding/pentestagent-main/.venv/bin/python -m pentestagent.mcp.tools_server --timeout 300

Then restart Codex.

Alternate (Config File): create or update ~/.codex/mcp_servers.json:

{
  "mcpServers": {
    "pentester4codex": {
      "command": "/path/to/pentestagent/.venv/bin/python",
      "args": ["-m", "pentestagent.mcp.tools_server", "--timeout", "300"]
    }
  }
}

Restart Codex. You should now see tools from pentester4codex.

Troubleshooting

• If Codex can’t find the server, confirm pentester4codex is on PATH:

  which pentester4codex

• If tools fail, ensure pentestagent is installed:

  which pentestagent

• If Codex reports an MCP handshake error, make sure you are not using --include-mcp when the server is listed inside the same MCP config. It can recurse and break startup. Use the exact CLI/config commands above.

Environment

• PENTESTAGENT_MCP_EXCLUDE_TOOLS: comma-separated tool names to hide
• PENTESTAGENT_WEBSEARCH_MCP_SERVER: forward web_search to an MCP server
• PENTESTAGENT_WEBSEARCH_MCP_TOOL: tool name on that server (default: web_search)