GEMMA By GOOGLE logo

GEMMA By GOOGLE

Unclaimed

by XenoCoreGiger31

A fully local, autonomous AI penetration-testing agent powered by Gemma 4-12B and a Flask MCP tool server. Runs recon, attack loops, and report generation on its own — no cloud, no API keys. For authorized security testing only.

Set up this server

This server needs project-specific setup. Follow the project instructions; no reusable public launch command is available yet.

Project instructions
autonomous-ai-agentscybersecurityethical-hackingexploitationgemmakali-linuxllmspenetration-testingpythonrecon

More in Security

Browse the full directory

Unclaimed listing

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

40 of 40 tools

Documented tools (40)

From project documentation. A server handshake does not verify each tool’s description or behavior.

run_amass

Subdomain enumeration (passive by default)

run_cloudfox

Cloud-infrastructure enumeration

run_command

Arbitrary command execution

run_curl

HTTP request testing

run_dalfox

XSS scanning (reflected / stored / DOM)

run_dnsx

DNS resolution and probing

run_enum4linux

SMB / Samba enumeration

run_exploit

Sandboxed execution of custom PoC scripts

run_feroxbuster

Recursive content discovery

run_ffuf

Web fuzzing

run_gau

Known URLs from OTX / Wayback / Common Crawl

run_ghosttrack

OSINT for username / IP / phone

run_gobuster

Web directory brute forcing

run_gowitness

Web screenshotting for visual recon

run_httpx

HTTP probing and fingerprinting

run_hydra

Credential brute forcing

run_john

Hash cracking

run_katana

Web crawling

run_masscan

Fast port discovery

run_medusa

Fast parallel brute forcing

run_metasploit

Fire a chosen Metasploit module at a target (human-approved)

run_ncrack

Network authentication cracking

run_netstat

Network connection analysis

run_nikto

Web vulnerability scanning

run_nmap

Deep service/version scanning

run_nuclei

Template-based vulnerability scanning

run_phoneinfoga

Phone-number OSINT

run_phonextract

Phone-number OSINT / extraction

run_recon_ng

recon-ng OSINT framework (non-interactive)

run_searchsploit

Exploit lookup

run_setoolkit

Social-engineering toolkit

run_sherlock

Username OSINT across 90+ platforms

run_shodan

Internet-exposure intelligence lookups

run_spiderfoot

Headless multi-module OSINT scanning

run_sqlmap

SQL injection testing

run_subfinder

Subdomain enumeration

run_theharvester

Passive OSINT — emails, subdomains, hosts

run_wafw00f

WAF / security-solution fingerprinting

run_waybackurls

Historical URLs from the Wayback Machine

run_wget

File retrieval

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about GEMMA By GOOGLE MCP Server

How do I connect GEMMA By GOOGLE MCP Server to Claude?
The project does not publish a launch command that MCPVault could verify. Open the repository linked on this page for its install steps; the listing names Claude Desktop as compatible clients.
Is GEMMA By GOOGLE MCP Server free?
The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can GEMMA By GOOGLE MCP Server do?
GEMMA By GOOGLE MCP Server documents 40 tools to the agent, including run_amass, run_cloudfox, run_command. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.