TL;DR: Agent harnesses cut time-to-finding from days to hours, surfacing two information leaks totaling more than 12 million records. This post breaks down practical MCP tooling and prompting patterns across external, application, and cloud penetration testing. It also draws the line on where these tactics are fair game and where client scope and inference provider choice still demand a judgment c...