Prototype · Preview: every server in the official registry, synced every 30 minutes. Sign in with Google to write reviews.
PopNx MCPMCP servers for people who use AI · explained in plain words

Excession Labs: site search and security test requests

by Excession-Labsversion 1.2.0i★ 0iRuns in the cloud
Registry nameai.excessionlabs/site

How to install

What it does

Search excessionlabs.ai, the site of Excession Labs, a security lab, and request a security test.

  • Connects Runs in the cloud
  • Account or key No key needed
  • Category Cybersecurity

Install

Pick the AI app you use, then copy the settings.

Passed 5/5 checks · What you ask goes through the maker’s server (excessionlabs.ai)

First: which AI do you use?

Pick your app and the steps appear below.

Works with Claude · about 2 min

No key, nothing to install · Set it up once on claude.ai or the desktop app, then use it in chat · free accounts can add 1 · on Team/Enterprise an Owner adds it

  1. Open Claude’s Connectors page

    CustomizeConnectors

    CustomizeConnectors1+ Add2https://…3Add4
  2. Click “+ Add” → “Add custom connector” and fill in these 2 fields

    Copy each value into the field with the same name in Claude, then click Continue

    Name · NameExcession Labs: site search and security test requests
    Remote MCP server URL · Addresshttps://excessionlabs.ai/mcp

    Leave Authentication as Claude detected it, then click Add

  3. Turn it on in a chat

    +ConnectorsExcession Labs: site search and security test requests

  4. Try it

    Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing

    ✓ If Claude says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with ChatGPT on business plans only

ChatGPT Business, Enterprise or Edu on the web, added by a workspace admin or owner · On Free, Plus or Pro: your ChatGPT plan cannot connect MCP yet

  1. Open ChatGPT’s add-MCP page on the web

    Plugins+Add custom MCP server

    ChatGPTPlugins1+2https://…3Create4
  2. Fill in the name and address

    Enter a name, paste the address under Connection, tick the risk warning and click Create as a plugin

    Name · NameExcession Labs: site search and security test requests
    Connection · Addresshttps://excessionlabs.ai/mcp
  3. Pick Excession Labs: site search and security test requests in a chat

    Start a new chat and pick Excession Labs: site search and security test requests from your plugins before typing

  4. Try it

    Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing

    ✓ If ChatGPT says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected

Menu names checked against OpenAI’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Claude Code · about 2 min

No key, nothing to install

  1. Open Terminal

    Mac: press Command+Space and type Terminal · Windows: open PowerShell

  2. Paste this command and press Enter

    claude mcp add --transport http --scope user site https://excessionlabs.ai/mcp
  3. Type /mcp in Claude Code

    You should see Excession Labs: site search and security test requests listed as connected

  4. Try it

    Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing

    ✓ If Claude Code says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected

Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with Cursor · about 2 min

No key, nothing to install

  1. Click this button to open Cursor

    Open in Cursor

    Cursor asks you to confirm; click Install

  2. Open the AI chat in Cursor in Agent mode

  3. Try it

    Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing

    ✓ If Cursor says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected

Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Works with VS Code · about 2 min

No key, nothing to install

  1. Click this button to open VS Code

    Open in VS Code

    VS Code asks you to confirm; click Install

  2. Open the AI chat in VS Code in Agent mode

  3. Try it

    Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing

    ✓ If VS Code says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected

Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version

Other apps that use MCP, such as Windsurf, Zed or Gemini CLI, each add servers differently. See how in the app list.

See every app that uses MCP →

Address for apps that connect over the web

Addresshttps://excessionlabs.ai/mcp

JSON settings are under “For developers” below

Stuck? Ask people who use Excession Labs: site search and security test requests💬 Discussion →
For developers: Terminal commands and JSON settings

Over the web

Claude Code

claude mcp add --transport http --scope user site https://excessionlabs.ai/mcp

Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "site": {
      "url": "https://excessionlabs.ai/mcp"
    }
  }
}

VS Code (mcp.json)

{
  "servers": {
    "site": {
      "type": "http",
      "url": "https://excessionlabs.ai/mcp"
    }
  }
}

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

At a glance

Downloads per weeki
Not on npm/PyPI
Verified domain
✓ excessionlabs.ai
Connection
Runs in the cloud
Transport
streamable-http
Latest versioni
1.2.0
Published to registryi
Nov 11, 2026
Code last changedi
Nov 10, 2026
Maker
Excession-Labs
Registry status
Active

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Connect over the internet in

ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

All apps, with pros and cons →

Related guides

What it can do

Tool names and descriptions exactly as the server reported them on Nov 11, 2026. The maker wrote them, not us; we show them as plain text.

  • search_site

    Search the public pages and research notes on excessionlabs.ai. Returns titles, URLs and one-line summaries.

  • get_page

    Read one public page of excessionlabs.ai as Markdown. Use a path from search_site or llms.txt.

  • how_to_contact

    Return the ways a person can contact Excession Labs: the request form, email, and the request_security_test tool for agents.

  • request_security_test

    Send a request for a security test (web application, API, multi-tenant SaaS isolation or AI application) to Excession Labs on behalf of a person who asked for it. Needs an agent key (POST https://excessionlabs.ai/agent/auth, then Authorization: Bearer ). Excession Labs replies to

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 12, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified against the domain excessionlabs.ai (the registry checks domain ownership)

  • ✓ Pass

    Still maintained

    Code last changed 2 days ago

  • ✓ Pass

    Has a licence

    Uses MIT

  • ✓ Pass

    Endpoint responds

    Responded in 1126 ms (HTTP 200)

  • – Not applicable

    Sign-in with OAuth

    No sign-in needed

  • ✓ Pass

    No hidden instructions in tool descriptions

    Read 4 tool descriptions and found no hidden instructions to the AI

Discussion

Ask, share a tip or report that it does not work. Sorted by what people marked helpful.

No posts yet. Be the first to ask or share.

Posts here are written by users, not the PopNx team.

Sign in with Google to post

User reviews

No reviews yet

Sign in with Google to write a review

Compared with others in Cybersecurityi

  • More stars than 0% of the other 1041 servers in this category
  • Published to the registry more recently than 94% of the other 1041 servers in this category
  • Basic checks equal to or better than 100% of the other 1041 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Excession Labs: site search and security test requests safe?

It passed 5 of 5 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.

Is it still maintained?

The GitHub repo last changed 2 days ago, and the latest version (1.2.0) reached the registry yesterday.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT Business and above.

What can I use instead?

In the same category: Robin: AI-Powered Dark Web OSINT, HOL Guard, SonarQube MCP Server

Others in the same category

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Robin: AI-Powered Dark Web OSINT

Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.

by apurvsinghgautamGrowing★ 8KUpdated 40 days ago

Runs on your computer

HOL Guard

Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

by hashgraph-onlineWidely used↓ 7.1K/wk★ 1.1KUpdated 7 days ago

Runs on your computer

SonarQube MCP Server

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

by SonarSourceGrowing★ 685Updated yesterday

Runs on your computer

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Excession Labs MCP servers

Three hosted, remote MCP servers (Streamable HTTP) run by Excession Labs, a security lab. They are listed in the official MCP Registry. This repository documents them: endpoints, tools, input schemas and examples. The servers are hosted; you connect to the URLs below and install nothing.

Server (registry name)URLTools
com.penetrationtestservices/sitehttps://penetrationtestservices.com/mcpcheck_security_headers, request_pentest, search_site, get_page, how_to_contact
com.pentestcompare/sitehttps://pentestcompare.com/mcplist_providers, get_provider, search_site, get_page, how_to_contact
com.airedteamingservices/sitehttps://airedteamingservices.com/mcprequest_pentest (AI application assessments), search_site, get_page, how_to_contact

Full tool definitions: servers/ .tools.json. Server cards: servers/ .server-card.json. Registry entries: servers/ .server.json.

Auth and limits

Reading needs no credential: 120 requests a minute per IP. An optional anonymous agent key from POST https:// /agent/auth raises that to 600 a minute (details in https:// /auth.md).

request_pentest needs the key. It sends a test request to Excession Labs for a person who asked for one. person_consent and authorized must be true. Excession Labs replies to the person by email, and testing starts only after a written scope and written authorization. Limits: 5 requests a day per key and 3 a day per email address. Never send passwords, keys or customer data.

Every other tool is read-only.

Connect

Claude Code:

claude mcp add --transport http pentestcompare https://pentestcompare.com/mcp

claude mcp add --transport http penetrationtestservices https://penetrationtestservices.com/mcp

Or install the plugin that bundles these servers with security review skills: https://github.com/Excession-Labs/claude-plugins

Any MCP client that supports Streamable HTTP can use the URLs above.

Example

curl -s https://penetrationtestservices.com/mcp -H 'content-type: application/json' \

-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"check_security_headers","arguments":{"url":"https://example.com"}}}'

Data and sources

Provider facts come from each provider's own public pages, with the date checked: https://github.com/Excession-Labs/pentest-provider-dataset. Excession Labs publishes PentestCompare and also sells security testing; its own row is marked publisher_owned.

Licence: MIT.