Pentest Tools.com CLI & MCP Server vs Sast MCP Server

In-depth architectural comparison of the Pentest Tools.com CLI & MCP Server and Sast MCP Server MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.

Which MCP Server Should You Choose?

Choose Pentest Tools.com CLI & MCP Server when:

• You need dedicated capabilities in the Security domain.
• You prefer local stdio subprocess transport architecture.
• Your security boundary fits: API Key required (BYOK (Pay Provider Direct)).
• You have access to required keys: PTT_API_KEY.
• Primary tools included: Website Scanner integration, Subdomain Finder integration, Network Scanner integration.

Explore Pentest Tools.com CLI & MCP Server Details

Choose Sast MCP Server when:

• You need dedicated capabilities in the Security domain.
• You prefer local stdio subprocess transport architecture.
• Your security boundary fits: API Key required (Free / Open Source).
• You have access to required keys: DEFECTDOJO_URL, GITHUB_TOKEN, JIRA_URL, JIRA_EMAIL, JIRA_API_TOKEN.

Feature & Specification Comparison

Specification	Pentest Tools.com CLI & MCP Server Security	Sast MCP Server Skyrxin Security
Summary	MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.	SAST/DAST server exposing 11 security scanners (Bandit, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP, and more) with closed-loop remediation (scan→patch→re-scan→verify), SARIF/SBOM/VEX export, compliance reporting, and CI integrations (GitHub Advanced Security, DefectDojo, Slack, Jira).
Category & Scope

Tools & Capabilities Breakdown

Ready-to-Paste Client Configurations

Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).

{
  "mcpServers": {
    "mcp-server-38": {
      "command": "uvx",
      "args": [
        "pentesttools"
      ],
      "env": {
        "PTT_API_KEY": "YOUR_PTT_API_KEY_HERE"
      }
    }
  }
}

{
  "mcpServers": {
    "skyrxin-sast-mcp-server": {
      "command": "uvx",
      "args": [
        "sast-mcp-server"
      ],
      "env": {
        "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL_HERE",
        "GITHUB_TOKEN": "YOUR_GITHUB_TOKEN_HERE",
        "JIRA_URL": "YOUR_JIRA_URL_HERE",
        "JIRA_EMAIL": "YOUR_JIRA_EMAIL_HERE",
        "JIRA_API_TOKEN": "YOUR_JIRA_API_TOKEN_HERE"
      }
    }
  }
}

Related MCP Server Comparisons