mcp server penetration testing