Pentest-Tools.com
Pentest-Tools.com · Developer tools
Online vulnerability scanning: targets, scans, findings and reports
The client pastes their API key from Pentest-Tools.com's settings. We store it encrypted.
Tested against Pentest-Tools.com's live API.
Building with Pentest-Tools.com? The docs have setup steps and code for every tool.
Open the Pentest-Tools.com docsTools
Your agent calls any endpoint of Pentest-Tools.com's API with the request tool, with the client's access attached.
Base URL for request
https://app.pentest-tools.com/api/v2
request
HTTPS ANY /v1/clients/{clientId}/pentest-tools/{path}
Any endpoint of Pentest-Tools.com's own API, with the client's access attached.
- servicestringrequired
- This service: pentest-tools
- methodstringrequired
- GET, POST, PUT, PATCH or DELETE
- pathstringrequired
- The path under https://app.pentest-tools.com/api/v2
- queryobjectoptional
- Query parameters
- bodyobjectoptional
- A JSON body
Over MCP every tool also takes client_id, from list_clients. Over HTTPS send it as clientId to https://api.operate.as/v1.
What the client approves
- Use the Pentest-Tools.com key you paste, with only the access you gave that key
Get started
Send your next client one link
Add a client, select the services, copy the link. You'll get an email the moment their access is ready. Start free, no card required. Paid plans are one flat monthly price, and a busy month never takes your agents offline.