mcpbeat Sign in

Turbopentest MCP Server

local only

Turbopentest runs on your own machine — the client starts it, so there is no endpoint to ping. 61 installs a week from npm. Last commit 9 Sep 2026.

AI-powered penetration testing. Launch scans, review findings, download reports.

Installs per day peak 70 · avg 9 · +323% w/w
a month agotoday
61
Installs / week
npm · @turbopentest/mcp-server
0
Stars
0 open issues
9 Sep 2026
Last commit
0 releases in 90 days
MIT
License
TypeScript

Nothing serious here today

Today is the operative word: we check Turbopentest every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add turbopentest -- npx -y @turbopentest/mcp-server
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "turbopentest": {
      "args": [
        "-y",
        "@turbopentest/mcp-server"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.turbopentest]
command = "npx"
args = ["-y", "@turbopentest/mcp-server"]
.cursor/mcp.json
{
  "mcpServers": {
    "turbopentest": {
      "args": [
        "-y",
        "@turbopentest/mcp-server"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "turbopentest": {
      "args": [
        "-y",
        "@turbopentest/mcp-server"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: TURBOPENTEST_API_KEY (Your TurboPentest API key for authentication), TURBOPENTEST_API_URL (Custom API base URL (default: https://turbopentest.com/api)). The author declared them in the registry entry; get the values from the project itself.

Alternatives to Turbopentest

same job, measured the same way
Pentest Tools
by pentest-tools

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

answering
A
ASMHunter
by asmhunter

Drive ASMHunter attack-surface monitoring from an AI agent: recon, scans, findings, reports.

80 installs/wk local only
BoardBrief AI
by boardbriefai

AI-powered board deck generation and governance reporting for private equity firms.

answering
Fractional Teams Portal
by fractionalteams

Fractional Teams client reports, outreach leads, lead marking, paid media and agent-readiness scans.

13 tools answering
Veridu
by michaelw-pr

Multi-reviewer AI code review: surfaces findings the reviewers agree on, disputes flagged.

answering
BugEzy
by bugezy

Voice-powered bug reporting with 13 MCP tools. Record bugs by talking; let AI find and fix them.

14 tools answering
Blitz Wings
by scheur

AI presentation and report generation: slides, diagrams, PPTX export, live preview MCP App.

answering
Secobserve MCP
by nh4ttruong

MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.

local only

Turbopentest — questions

Answers built from our own checks of this server.

Why is there no uptime for Turbopentest?
Turbopentest runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @turbopentest/mcp-server was installed 61 times last week.
How do I connect Turbopentest?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @turbopentest/mcp-server straight from npm; nothing to host, nothing to sign up for.
How many people use Turbopentest?
The npm package @turbopentest/mcp-server was installed 61 times in the last week. Week over week that is +323%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Turbopentest open source?
Yes — it is published under the MIT licence, written in TypeScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.