Inside an MCP Pentest