New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice
// SCAN REPORT

Pengstrike

163 tools. 120 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated:

120 can modify or destroy data
43 read-only
163 tools total

Community server · catalogue entry checked 05/08/2026

How to control Pengstrike ↓

TOOL MAP

What Pengstrike exposes to your agents

Read (43) Write / Execute (116) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Pengstrike tools

Destructive · High cancel_task 取消一个正在运行或排队的异步任务（杀掉其进程树）。 Destructive · High clear_cache Clear the cache on the PengStrike AI server. Destructive · High delete_file Delete a file or directory on the PengStrike server. Execute · Critical execute_python_script Python script execution is a direct Execute category action—it runs code whose effects depend entirely on script arguments and content.

120 of Pengstrike's 163 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Pengstrike

PolicyLayer is an MCP gateway — it sits between your AI agents and Pengstrike, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "cancel_task": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "create_ctf_challenge_workflow": {
    "limits": [
      {
        "counter": "create_ctf_challenge_workflow_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "analyze_target_intelligence": {
    "limits": [
      {
        "counter": "analyze_target_intelligence_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Pengstrike — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON PENGSTRIKE →

Instant setup, no code required.

FULL CATALOGUE

All 163 Pengstrike tools

DESTRUCTIVE 3 tools
Destructive cancel_task 取消一个正在运行或排队的异步任务（杀掉其进程树）。 Destructive clear_cache Clear the cache on the PengStrike AI server. Destructive delete_file Delete a file or directory on the PengStrike server.
EXECUTE 107 tools
Execute advanced_payload_generation advanced_payload_generation Execute ai_generate_attack_suite Generate comprehensive attack suite with multiple payload types. Execute ai_generate_payload ai_generate_payload Execute ai_reconnaissance_workflow ai_reconnaissance_workflow Execute ai_test_payload ai_test_payload Execute ai_vulnerability_assessment ai_vulnerability_assessment Execute amass_scan Execute Amass for subdomain enumeration with enhanced logging. Execute angr_symbolic_execution angr_symbolic_execution Execute api_fuzzer api_fuzzer Execute arjun_parameter_discovery arjun_parameter_discovery Execute arp_scan_discovery arp_scan_discovery Execute autorecon_comprehensive autorecon_comprehensive Execute autorecon_scan autorecon_scan Execute binwalk_analyze binwalk_analyze Execute browser_agent_inspect browser_agent_inspect Execute bugbounty_authentication_bypass_testing bugbounty_authentication_bypass_testing Execute bugbounty_business_logic_testing bugbounty_business_logic_testing Execute bugbounty_comprehensive_assessment bugbounty_comprehensive_assessment Execute bugbounty_file_upload_testing Create file upload vulnerability testing workflow with bypass techniques. Execute bugbounty_reconnaissance_workflow bugbounty_reconnaissance_workflow Execute burpsuite_alternative_scan burpsuite_alternative_scan Execute burpsuite_scan burpsuite_scan Execute checkov_iac_scan checkov_iac_scan Execute clair_vulnerability_scan clair_vulnerability_scan Execute comprehensive_api_audit comprehensive_api_audit Execute create_attack_chain_ai create_attack_chain_ai Execute dalfox_xss_scan dalfox_xss_scan Execute dirb_scan Execute Dirb for directory brute forcing with enhanced logging. Execute dirsearch_scan dirsearch_scan Execute discover_attack_chains discover_attack_chains Execute dnsenum_scan dnsenum_scan Execute docker_bench_security_scan docker_bench_security_scan Execute dotdotpwn_scan dotdotpwn_scan Execute enum4linux_ng_advanced enum4linux_ng_advanced Execute enum4linux_scan Execute Enum4linux for SMB enumeration with enhanced logging. Execute execute_command Execute an arbitrary command on the PengStrike AI server with enhanced logging. Execute execute_python_script execute_python_script Execute falco_runtime_monitoring falco_runtime_monitoring Execute feroxbuster_scan feroxbuster_scan Execute ffuf_scan ffuf_scan Execute fierce_scan Execute fierce for DNS reconnaissance with enhanced logging. Execute foremost_carving foremost_carving Execute gdb_analyze gdb_analyze Execute gdb_peda_debug gdb_peda_debug Execute generate_exploit_from_cve generate_exploit_from_cve Execute generate_payload generate_payload Execute ghidra_analysis ghidra_analysis Execute gobuster_scan gobuster_scan Execute graphql_scanner graphql_scanner Execute hakrawler_crawl hakrawler_crawl Execute hashcat_crack hashcat_crack Execute hashpump_attack hashpump_attack Execute http_framework_test http_framework_test Execute http_intruder Simple Intruder (sniper) fuzzing. Iterates payloads over each param individually. Execute http_repeater Send a crafted request (Burp Repeater equivalent). request_spec keys: url, method, headers, cookies, data. Execute httpx_probe httpx_probe Execute hydra_attack hydra_attack Execute intelligent_smart_scan intelligent_smart_scan Execute jaeles_vulnerability_scan jaeles_vulnerability_scan Execute john_crack john_crack Execute katana_crawl katana_crawl Execute kube_bench_cis kube_bench_cis Execute kube_hunter_scan kube_hunter_scan Execute masscan_high_speed masscan_high_speed Execute metasploit_run Execute a Metasploit module with enhanced logging. Execute msfvenom_generate msfvenom_generate Execute nbtscan_netbios nbtscan_netbios Execute netexec_scan netexec_scan Execute nikto_scan Execute Nikto web vulnerability scanner with enhanced logging. Execute nmap_advanced_scan nmap_advanced_scan Execute nmap_scan nmap_scan Execute nuclei_scan nuclei_scan Execute objdump_analyze objdump_analyze Execute one_gadget_search one_gadget_search Execute optimize_tool_parameters_ai optimize_tool_parameters_ai Execute pacu_exploitation pacu_exploitation Execute paramspider_discovery paramspider_discovery Execute pause_process Pause a specific running process. Execute prowler_scan prowler_scan Execute pwninit_setup pwninit_setup Execute pwntools_exploit pwntools_exploit Execute qsreplace_parameter_replacement qsreplace_parameter_replacement Execute radare2_analyze radare2_analyze Execute research_zero_day_opportunities research_zero_day_opportunities Execute responder_credential_harvest responder_credential_harvest Execute resume_process Resume a paused process. Execute ropgadget_search ropgadget_search Execute ropper_gadget_search ropper_gadget_search Execute rpcclient_enumeration rpcclient_enumeration Execute rustscan_fast_scan rustscan_fast_scan Execute scout_suite_assessment scout_suite_assessment Execute select_optimal_tools_ai select_optimal_tools_ai Execute smbmap_scan smbmap_scan Execute sqlmap_scan Execute SQLMap for SQL injection testing with enhanced logging. Execute subfinder_scan subfinder_scan Execute terrascan_iac_scan terrascan_iac_scan Execute test_error_recovery test_error_recovery Execute threat_hunting_assistant threat_hunting_assistant Execute trivy_scan trivy_scan Execute volatility_analyze volatility_analyze Execute volatility3_analyze volatility3_analyze Execute wafw00f_scan Execute wafw00f to identify and fingerprint WAF products with enhanced logging. Execute wfuzz_scan wfuzz_scan Execute wpscan_analyze Execute WPScan for WordPress vulnerability scanning with enhanced logging. Execute x8_parameter_discovery x8_parameter_discovery Execute xsser_scan Execute XSSer for XSS vulnerability testing with enhanced logging. Execute zap_scan zap_scan
WRITE 9 tools
Write create_ctf_challenge_workflow create_ctf_challenge_workflow Write create_file create_file Write create_scan_summary create_scan_summary Write create_vulnerability_report create_vulnerability_report Write http_set_rules Set match/replace rules used to rewrite parts of URL/query/headers/body before sending. Write http_set_scope Define in-scope host (and optionally subdomains) so out-of-scope requests are skipped. Write install_python_package Install a Python package in a virtual environment on the PengStrike server. Write modify_file modify_file Write terminate_process Terminate a specific running process.
READ 43 tools
Read analyze_target_intelligence Analyze target using AI-powered intelligence to create comprehensive profile. Read anew_data_processing anew_data_processing Read api_schema_analyzer api_schema_analyzer Read arjun_scan arjun_scan Read auto_solve_ctf_challenge auto_solve_ctf_challenge Read bugbounty_osint_gathering Create OSINT (Open Source Intelligence) gathering workflow for bug bounty reconnaissance. Read bugbounty_vulnerability_hunting bugbounty_vulnerability_hunting Read checksec_analyze Check security features of a binary with enhanced logging. Read cloudmapper_analysis cloudmapper_analysis Read correlate_threat_intelligence correlate_threat_intelligence Read ctf_binary_analyzer ctf_binary_analyzer Read ctf_cryptography_solver ctf_cryptography_solver Read ctf_forensics_analyzer ctf_forensics_analyzer Read ctf_team_strategy ctf_team_strategy Read detect_technologies_ai Use AI to detect technologies and provide technology-specific testing recommendations. Read display_system_metrics Display current system metrics and performance indicators with visual formatting. Read error_handling_statistics Get intelligent error handling system statistics and recent error patterns. Read exiftool_extract exiftool_extract Read gau_discovery gau_discovery Read get_cache_stats Get cache statistics from the PengStrike AI server. Read get_command_history get_command_history Read get_live_dashboard Get a beautiful live dashboard showing all active processes with enhanced visual formatting. Read get_process_dashboard Get enhanced process dashboard with visual status indicators. Read get_process_status Get the status of a specific process. Read get_task_result get_task_result Read get_telemetry Get system telemetry from the PengStrike AI server. Read harvest_tasks harvest_tasks Read jwt_analyzer jwt_analyzer Read libc_database_lookup libc_database_lookup Read list_active_processes List all active processes on the PengStrike AI server. Read list_active_tasks list_active_tasks Read list_files List files in a directory on the PengStrike server. Read monitor_cve_feeds monitor_cve_feeds Read paramspider_mining paramspider_mining Read read_output_file read_output_file Read server_health Check the health status of the PengStrike AI server. Read steghide_analysis steghide_analysis Read strings_extract Extract strings from a binary file with enhanced logging. Read suggest_ctf_tools suggest_ctf_tools Read uro_url_filtering uro_url_filtering Read vulnerability_intelligence_dashboard vulnerability_intelligence_dashboard Read waybackurls_discovery waybackurls_discovery Read xxd_hexdump xxd_hexdump
OTHER 1 tools
Other format_tool_output_visual format_tool_output_visual
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1662 tools
adminautomation
Delx Mcp A2a 1082 tools
adminautomation
Delx Protocol — Agent Recovery & Continuity 1076 tools
adminautomation
Nodebench 824 tools
adminautomation
MCP Framework Personal 811 tools
adminautomation
Delx MCP Server 740 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Eda Agent 726 tools
adminautomation
FAQ

Questions about Pengstrike

Can an AI agent delete data through the Pengstrike MCP server? +

Yes. The Pengstrike server exposes 3 destructive tools including cancel_task, clear_cache, delete_file. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Pengstrike? +

The Pengstrike server has 9 write tools including create_ctf_challenge_workflow, create_file, create_scan_summary. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Pengstrike.

How many tools does the Pengstrike MCP server expose? +

163 tools across 4 categories: Destructive, Execute, Read, Write. 43 are read-only. 120 can modify, create, or delete data.

How do I enforce a policy on Pengstrike? +

Register the Pengstrike MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Pengstrike tool call.

Deterministic rules across all 163 Pengstrike tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PENGSTRIKE →

Instant setup, no code required.

163 Pengstrike tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Pengstrike's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.