tools.schemasevery tool has an object input schema
pass
tools.annotations5 of 5 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 907 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump
pass
tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations
stabilityn/a · weight 15
n/a
stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 4 of the 7 days needed
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package
5 tools, about 907 tokens to load them all · tool set 3e4af4f6e1d5 · tools last changed 2026-11-10 · checked 2026-11-14 07:36 UTC
Tool changes
request_pentestchangedinput schema
search_sitechangedinput schema
request_pentestadded
Send a request for a penetration test or an AI application security assessment to Excession Labs on behalf of a person who asked for it. Needs an agent key (POST /agent/auth, then Authorization: Bearer <key>). Excession Labs replies to the person by email to agree scope; testing starts only after a written scope and written authorization from the system owner. Never include passwords, API keys or customer data. Limits: 5 requests a day per key, 3 a day per email address.
Fetch one public web page (one GET per redirect, like a browser visit) and grade its HTTP security headers: HTTPS, HSTS, Content-Security-Policy, clickjacking protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, version disclosure and cookie flags. Reads headers only. This is not a penetration test.
get_pageread-only
Return the Markdown text of a page on penetrationtestservices.com, given its path (for example /guides/).
how_to_contactread-only
Return the form URL and email address a person can use to contact Excession Labs. This tool does not send anything.
request_pentest
Send a request for a penetration test or an AI application security assessment to Excession Labs on behalf of a person who asked for it. Needs an agent key (POST /agent/auth, then Authorization: Bearer <key>). Excession Labs replies to the person by email to agree scope; testing starts only after a written scope and written authorization from the system owner. Never include passwords, API keys or customer data. Limits: 5 requests a day per key, 3 a day per email address.
search_siteread-only
Search the guides, service pages and research on penetrationtestservices.com. Returns titles, URLs and one-line summaries.