--- title: Using MCP Agents for Penetration Testing | daily.dev description: Bishop Fox describes using Model Context Protocol (MCP) agent harnesses across external, application, and cloud penetration testing engagements. Structured... canonical: https://daily.dev/posts/using-mcp-agents-for-penetration-testing-ph79zxfmt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Using MCP Agents for Penetration Testing | daily.dev og:description: Bishop Fox describes using Model Context Protocol (MCP) agent harnesses across external, application, and cloud penetration testing engagements. Structured... og:url: https://daily.dev/posts/using-mcp-agents-for-penetration-testing-ph79zxfmt og:image: https://api.daily.dev/og/posts/ph79ZXfmT.png og:image:alt: Using MCP Agents for Penetration Testing og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Using MCP Agents for Penetration Testing **[Sliver C2 Documentation](https://daily.dev/sources/bishopfox)** · 11 min read · 0 upvotes · 0 comments ## Summary Bishop Fox describes using Model Context Protocol (MCP) agent harnesses across external, application, and cloud penetration testing engagements. Structured prompts, scoped MCP tools, and orchestrated sub-agents cut time-to-find from days to hours, surfacing two personal-information leaks totaling over 12 million records. The piece walks through prompt escalation patterns (basic attack prompts, test-plan-driven prompts, proxied HTTP requests, authorization testing with multiple accounts, cloud tooling like scoutsuite and cloudfox) and stresses human oversight, client scope boundaries, and inference-provider choice as ongoing judgment calls, closing with an FAQ on MCP and AI in pen testing. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How can MCP servers be used to make AI agents more effective in penetration testing? MCP servers expose a limited, well-described set of tools (like a specific nmap or masscan scan) to the LLM so it executes tasks deterministically instead of improvising a command line. Bishop Fox found that combining MCP tool exposure with a maintained test plan and an event-driven loop for processing discovered data controlled token usage and produced more repeatable, thorough external, application, and cloud penetration tests than simply telling an LLM to 'attack this target.' _Teams weighing agent-based workflows for security testing can track practical MCP patterns on daily.dev._ ### How much faster can AI agents find vulnerabilities compared to manual penetration testing? Using agent harnesses with MCP servers, penetration testers found two separate personal information leaks totaling over 12 million unique records within hours instead of the few days it would typically take manually. Both issues were found during client-commissioned fieldwork, with one target having been in scope for bug bounty programs for years without the leaks being caught. _daily.dev helps security practitioners follow real-world results from AI-assisted testing workflows._ ### Can AI perform a full penetration test on its own without a human tester? No, AI cannot yet perform penetration testing independently. It can accelerate repetitive tasks, analyze large volumes of data, and execute testing methodologies, but experienced human testers remain responsible for defining scope, validating findings, supervising tool execution, and assessing business risk throughout the engagement. _Follow ongoing debate over AI's role versus human oversight in security testing on daily.dev._ ## Similar posts on daily.dev - [MCP Security: Understanding Vulnerabilities in Model Context Protocol](https://daily.dev/posts/mcp-security-understanding-vulnerabilities-in-model-context-protocol-hcscknky1) · marmelab · 4 upvotes · 0 comments - [MCP Security: Navigating the Exploit Playbook for Agent](https://daily.dev/posts/mcp-security-navigating-the-exploit-playbook-for-agent-yzw7iiipw) · DEV · 2 upvotes · 0 comments - [MCP in action: What makes AI agents actually useful](https://daily.dev/posts/mcp-in-action-what-makes-ai-agents-actually-useful-xzn8qnwi5) · All Things Open · 0 upvotes · 0 comments - [The CISO’s Guide to Model Context Protocol \(MCP\)](https://daily.dev/posts/the-ciso-s-guide-to-model-context-protocol-mcp--hxvmy4kol) · Security Boulevard · 0 upvotes · 0 comments - [What CISOs need to know about new tools for securing MCP servers](https://daily.dev/posts/what-cisos-need-to-know-about-new-tools-for-securing-mcp-servers-5z1ny9azn) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#mcp](https://daily.dev/tags/mcp), [#appsec](https://daily.dev/tags/appsec) [View this post on daily.dev](https://daily.dev/posts/using-mcp-agents-for-penetration-testing-ph79zxfmt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Using MCP Agents for Penetration Testing","url":"https://daily.dev/posts/using-mcp-agents-for-penetration-testing-ph79zxfmt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/using-mcp-agents-for-penetration-testing-ph79zxfmt"},"datePublished":"2026-08-23T12:21:38.014Z","dateModified":"2026-08-23T12:41:14.812Z","description":"Bishop Fox describes using Model Context Protocol (MCP) agent harnesses across external, application, and cloud penetration testing engagements. Structured...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dd048316927b934a9c4ded63f8cba1cf?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dd048316927b934a9c4ded63f8cba1cf?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Sliver C2 Documentation","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Sliver C2 Documentation","logo":"https://media.daily.dev/image/upload/logos/placeholder.jpg","url":"https://daily.dev/sources/bishopfox"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/using-mcp-agents-for-penetration-testing-ph79zxfmt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,mcp,appsec","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sliver C2 Documentation","item":"https://daily.dev/sources/bishopfox"},{"@type":"ListItem","position":3,"name":"Using MCP Agents for Penetration Testing"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/using-mcp-agents-for-penetration-testing-ph79zxfmt#faq","mainEntity":[{"@type":"Question","name":"How can MCP servers be used to make AI agents more effective in penetration testing?","acceptedAnswer":{"@type":"Answer","text":"MCP servers expose a limited, well-described set of tools (like a specific nmap or masscan scan) to the LLM so it executes tasks deterministically instead of improvising a command line. Bishop Fox found that combining MCP tool exposure with a maintained test plan and an event-driven loop for processing discovered data controlled token usage and produced more repeatable, thorough external, application, and cloud penetration tests than simply telling an LLM to 'attack this target.' Teams weighing agent-based workflows for security testing can track practical MCP patterns on daily.dev."}},{"@type":"Question","name":"How much faster can AI agents find vulnerabilities compared to manual penetration testing?","acceptedAnswer":{"@type":"Answer","text":"Using agent harnesses with MCP servers, penetration testers found two separate personal information leaks totaling over 12 million unique records within hours instead of the few days it would typically take manually. Both issues were found during client-commissioned fieldwork, with one target having been in scope for bug bounty programs for years without the leaks being caught. daily.dev helps security practitioners follow real-world results from AI-assisted testing workflows."}},{"@type":"Question","name":"Can AI perform a full penetration test on its own without a human tester?","acceptedAnswer":{"@type":"Answer","text":"No, AI cannot yet perform penetration testing independently. It can accelerate repetitive tasks, analyze large volumes of data, and execute testing methodologies, but experienced human testers remain responsible for defining scope, validating findings, supervising tool execution, and assessing business risk throughout the engagement. Follow ongoing debate over AI's role versus human oversight in security testing on daily.dev."}}]} ```