Penetration Test Services
Read-only remote MCP server. Grade a site's HTTP security headers and search web app and API penetration testing guides. No authentication.
Hosted MCP Server
npx add-mcp 'https://penetrationtestservices.com/mcp'Installs into Claude Code, Codex, Cursor and more
Documentation
Developers and AI agents
Source: https://penetrationtestservices.com/developers/ Publisher: Excession Labs (penetrationtestservices.com) Last updated: 2026-11-09
Machine-readable access to penetrationtestservices.com: OpenAPI description, API catalog, Markdown versions of every page, llms.txt and the rules for AI agents.
Everything on penetrationtestservices.com is public and readable by software. Reading needs no account and no key.
| What | Where |
|---|---|
| API description (OpenAPI 3.1) | /openapi.json |
| API catalog (RFC 9727) | /.well-known/api-catalog |
| Rules for AI agents | /auth.md |
| Site index for language models | /llms.txt, full text in /llms-full.txt |
| Markdown version of any page | add index.md to the page URL, or send Accept: text/markdown |
| Sitemap and feed | /sitemap.xml, /feed.xml |
| Service status | /api/health |
Sending an enquiry
POST /api/enquiry stores an enquiry and notifies Excession Labs. It needs a Cloudflare Turnstile token, which only a person completing the form on the site can produce. An agent helping someone get in touch should give them the form or the address support@excessionlabs.ai. The field list for each form is in the OpenAPI description.
Fair use
Read and cite freely. Keep request rates reasonable; the enquiry endpoint is rate limited. Do not try to bypass the human verification. Questions: support@excessionlabs.ai.