mcp-pentest

The MCP server explicitly addresses security concerns by implementing an authorization system (token-based), rate limiting, comprehensive input validation to prevent command injection (via `input-validator.ts`), and detailed audit logging. It leverages `command-executor.ts` for safe command execution. However, as a penetration testing tool, it is designed to interact with target systems and execute powerful external binaries (Nmap, Nikto, SQLMap, etc.). Users must adhere strictly to the legal disclaimers and 'AUTHORIZED USE ONLY' warnings, obtaining written permission before testing any target, as misuse can have severe legal consequences.