Robin: AI-Powered Dark Web OSINT
Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
Search excessionlabs.ai, the site of Excession Labs, a security lab, and request a security test.
Pick the AI app you use, then copy the settings.
Passed 5/5 checks · What you ask goes through the maker’s server (excessionlabs.ai)
First: which AI do you use?
Pick your app and the steps appear below.
Works with Claude · about 2 min
No key, nothing to install · Set it up once on claude.ai or the desktop app, then use it in chat · free accounts can add 1 · on Team/Enterprise an Owner adds it
CustomizeConnectors
Copy each value into the field with the same name in Claude, then click Continue
Excession Labs: site search and security test requestshttps://excessionlabs.ai/mcpLeave Authentication as Claude detected it, then click Add
+ConnectorsExcession Labs: site search and security test requests
Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing✓ If Claude says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected
Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with ChatGPT on business plans only
ChatGPT Business, Enterprise or Edu on the web, added by a workspace admin or owner · On Free, Plus or Pro: your ChatGPT plan cannot connect MCP yet
Plugins+Add custom MCP server
Enter a name, paste the address under Connection, tick the risk warning and click Create as a plugin
Excession Labs: site search and security test requestshttps://excessionlabs.ai/mcpStart a new chat and pick Excession Labs: site search and security test requests from your plugins before typing
Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing✓ If ChatGPT says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected
Menu names checked against OpenAI’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with Claude Code · about 2 min
No key, nothing to install
Mac: press Command+Space and type Terminal · Windows: open PowerShell
claude mcp add --transport http --scope user site https://excessionlabs.ai/mcpYou should see Excession Labs: site search and security test requests listed as connected
Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing✓ If Claude Code says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected
Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with Cursor · about 2 min
No key, nothing to install
Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing✓ If Cursor says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected
Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with VS Code · about 2 min
No key, nothing to install
Use Excession Labs: site search and security test requests and tell me what you can do for me, then show me one thing✓ If VS Code says it is using Excession Labs: site search and security test requests or shows a Excession Labs: site search and security test requests tool in the answer, you are connected
Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Other apps that use MCP, such as Windsurf, Zed or Gemini CLI, each add servers differently. See how in the app list.
Address for apps that connect over the web
https://excessionlabs.ai/mcpJSON settings are under “For developers” below
Claude Code
claude mcp add --transport http --scope user site https://excessionlabs.ai/mcpCursor (~/.cursor/mcp.json)
{
"mcpServers": {
"site": {
"url": "https://excessionlabs.ai/mcp"
}
}
}VS Code (mcp.json)
{
"servers": {
"site": {
"type": "http",
"url": "https://excessionlabs.ai/mcp"
}
}
}These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.
Connect over the internet in
ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast
Tool names and descriptions exactly as the server reported them on Nov 11, 2026. The maker wrote them, not us; we show them as plain text.
search_siteSearch the public pages and research notes on excessionlabs.ai. Returns titles, URLs and one-line summaries.
get_pageRead one public page of excessionlabs.ai as Markdown. Use a path from search_site or llms.txt.
how_to_contactReturn the ways a person can contact Excession Labs: the request form, email, and the request_security_test tool for agents.
request_security_testSend a request for a security test (web application, API, multi-tenant SaaS isolation or AI application) to Excession Labs on behalf of a person who asked for it. Needs an agent key (POST https://excessionlabs.ai/agent/auth, then Authorization: Bearer ). Excession Labs replies to
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 12, 2026
The registry name was verified against the domain excessionlabs.ai (the registry checks domain ownership)
Code last changed 2 days ago
Uses MIT
No sign-in needed
Read 4 tool descriptions and found no hidden instructions to the AI
Ask, share a tip or report that it does not work. Sorted by what people marked helpful.
No posts yet. Be the first to ask or share.
Posts here are written by users, not the PopNx team.
No reviews yet
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 5 of 5 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
The registry does not list a required key, though some servers ask you to sign in on first use.
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed 2 days ago, and the latest version (1.2.0) reached the registry yesterday.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT Business and above.
In the same category: Robin: AI-Powered Dark Web OSINT, HOL Guard, SonarQube MCP Server
Servers in the same category from other makers, sorted by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Three hosted, remote MCP servers (Streamable HTTP) run by Excession Labs, a security lab. They are listed in the official MCP Registry. This repository documents them: endpoints, tools, input schemas and examples. The servers are hosted; you connect to the URLs below and install nothing.
| Server (registry name) | URL | Tools |
|---|---|---|
com.penetrationtestservices/site | https://penetrationtestservices.com/mcp | check_security_headers, request_pentest, search_site, get_page, how_to_contact |
com.pentestcompare/site | https://pentestcompare.com/mcp | list_providers, get_provider, search_site, get_page, how_to_contact |
com.airedteamingservices/site | https://airedteamingservices.com/mcp | request_pentest (AI application assessments), search_site, get_page, how_to_contact |
Full tool definitions: servers/ .tools.json. Server cards: servers/ .server-card.json. Registry entries: servers/ .server.json.
Reading needs no credential: 120 requests a minute per IP. An optional anonymous agent key from POST https:// /agent/auth raises that to 600 a minute (details in https:// /auth.md).
request_pentest needs the key. It sends a test request to Excession Labs for a person who asked for one. person_consent and authorized must be true. Excession Labs replies to the person by email, and testing starts only after a written scope and written authorization. Limits: 5 requests a day per key and 3 a day per email address. Never send passwords, keys or customer data.
Every other tool is read-only.
Claude Code:
claude mcp add --transport http pentestcompare https://pentestcompare.com/mcp
claude mcp add --transport http penetrationtestservices https://penetrationtestservices.com/mcp
Or install the plugin that bundles these servers with security review skills: https://github.com/Excession-Labs/claude-plugins
Any MCP client that supports Streamable HTTP can use the URLs above.
curl -s https://penetrationtestservices.com/mcp -H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"check_security_headers","arguments":{"url":"https://example.com"}}}'
Provider facts come from each provider's own public pages, with the date checked: https://github.com/Excession-Labs/pentest-provider-dataset. Excession Labs publishes PentestCompare and also sells security testing; its own row is marked publisher_owned.
Licence: MIT.