Developer Tools · Security

mcp_server_pt logo

mcp_server_pt

yallasec/mcp_server_pt

A comprehensive tool for analyzing web applications with a focus on business logic security vulnerabilities. This Master Control Program (MCP) systematically crawls, analyzes, and identifies potential security issues beyond what standard scanners detect.

Install

See repository

Setup steps are in the repository README.

Open README
GitHub stars
1
Author
@yallasec
Category
Developer Tools, Security
License
MIT
Updated
Oct 6, 2026

About mcp_server_pt

Web Application Penetration Testing MCP helps you understand the business context of web applications by building a complete map of the application structure and identifying potential security weak points, particularly in business logic implementation.

Features

  • Automatically builds a tree structure of the entire web application

  • Maps all links, forms, and interactive elements

  • Identifies input fields with their types and expected values

  • Automatically detects login/logout pages

  • Can authenticate using credentials to access protected areas

  • Supports both cookie-based and bearer token authentication

  • Identifies potential IDOR (Insecure Direct Object Reference) vulnerabilities

  • Detects mathematical/calculation edge cases

  • Maps multi-step workflows that could be manipulated

  • Discovers permission and access control issues

Details on this page are taken from the project's README. Open README

Related MCP servers

More servers
Playwright logo

Playwright

microsoft/playwright

72.2k

Playwright is a framework for web automation and testing. It drives Chromium, Firefox, and WebKit with a single API — in your tests, in your scripts, and as a tool for AI agents.

Developer Tools
repomix logo

repomix

yamadashy/repomix

15.2k

Repomix is a tool that packs a codebase into an AI-friendly format, supporting local and remote repository processing and providing code compression, security checks and multiple output formats.

Developer Tools
UI-TARS-desktop logo

UI-TARS-desktop

bytedance/UI-TARS-desktop

12.9k

TARS is ByteDance's multimodal AI agent stack, shipping two projects: Agent TARS (a CLI and Web UI agent built on MCP) and UI-TARS-desktop (a desktop GUI agent).

Developer Tools
blender logo

blender

ahujasid/blender-mcp

10.6k

formerly blender-mcp — the PyPI package is now mcp-for-blender. Existing setups keep working; no config change is required. Read more.

Developer Tools
Playwright Browser Automation logo

Playwright Browser Automation

microsoft/playwright-mcp

9.2k

A Model Context Protocol (MCP) server that provides browser automation capabilities using Playwright. This server enables LLMs to interact with web pages through structured accessibility snapshots, bypassing the need for screenshots or visually-tuned models.

Developer Tools
2344 logo

2344

comet-ml/opik

7k

Opik is the open-source LLM observability and evaluation platform for AI agent tracing, LLM evaluation, prompt management, and production monitoring. Built by Comet. Apache-2.0 licensed, free to self-host the full platform, with 20,000+ GitHub stars.

Developer Tools