Skip to main content
Glama

Kali Linux MCP Server & Client

A high-performance Model Context Protocol (MCP) Server and Client ecosystem running natively on Kali Linux, providing AI assistants (VSCode, Claude Desktop, Antigravity IDE) full, structured access to all 600+ installed security, penetration testing, and forensic tools.


Features

  • 600+ Kali Tools Available: Execute any binary tool in the full Kali suite natively (Nmap, Metasploit, Sqlmap, Gobuster, Nikto, John the Ripper, Hydra, Wireshark, Searchsploit, Ghidra, etc.).

  • VirtualBox / Remote VM Support:

    • Run server.py inside a VirtualBox Kali VM (listening on host-only or bridged network adapter).

    • Run client.py on your Windows Host inside mcp.json. It bridges local Stdio to remote Kali SSE HTTP seamlessly!

  • Dual Transport Architecture:

    • Stdio Mode: For single-machine local setup.

    • SSE HTTP Mode: For cross-machine or VirtualBox / VMware / WSL2 setups.

  • Dynamic Tool Discovery & Manpages: Automatically search installed tools by category and query manpages (man <tool>) or --help documentation on the fly.

  • Structured Wrappers & Workspace Management: Includes high-level JSON wrappers for key tools (nmap, sqlmap, gobuster, searchsploit) and local artifact/file management.


Related MCP server: MCP Kali Server

Installation

On Kali Linux (Server)

git clone https://github.com/your-repo/kali-mcp.git
cd kali-mcp
python3 -m pip install -r requirements.txt
python3 -m pip install -e .

On Windows Host (Client)

git clone https://github.com/your-repo/kali-mcp.git
cd kali-mcp
pip install -r requirements.txt
pip install -e .

Usage Scenarios

  1. On VirtualBox Kali VM: Check your Kali VM host-only or bridged IP address (ip a, e.g. 192.168.56.101), then run the server:

    python3 server.py --host 0.0.0.0 --port 8000
    # Or using the installed CLI:
    kali-mcp-server --host 0.0.0.0 --port 8000
  2. In VSCode / Claude Desktop / Antigravity IDE on Windows Host: Configure your mcp.json file:

    {
      "mcpServers": {
        "kali-linux": {
          "command": "python",
          "args": [
            "C:/path/to/kali-mcp-tool/client.py",
            "--server", "192.168.56.101",
            "--port", "8000"
          ]
        }
      }
    }

    Alternatively, if installed via pip install -e ., you can use the installed CLI command directly:

    {
      "mcpServers": {
        "kali-linux": {
          "command": "kali-mcp-client",
          "args": [
            "--server", "192.168.56.101",
            "--port", "8000"
          ]
        }
      }
    }

    The client will bridge Stdio from your IDE directly to your VirtualBox Kali VM over SSE!

  3. Interactive Terminal Client (Optional): You can test tools directly from a terminal prompt:

    python client.py --server 192.168.56.101 --port 8000 --interactive
    # Or:
    kali-mcp-client --server 192.168.56.101 --port 8000 --interactive

Scenario 2: Local Single-Environment Setup (Running inside Kali directly)

If your IDE is running directly on Kali Linux:

{
  "mcpServers": {
    "kali-linux": {
      "command": "python3",
      "args": [
        "/path/to/kali-mcp-tool/server.py"
      ]
    }
  }
}

Or using the installed command:

{
  "mcpServers": {
    "kali-linux": {
      "command": "kali-mcp-server"
    }
  }
}

Available MCP Tools

Tool

Description

kali_execute_command

Execute any arbitrary shell command natively on Kali with timeout control.

kali_search_tools

Search installed Kali tools by name, keyword, or category.

kali_get_tool_help

Dynamically fetch manpages (man) or --help documentation for any tool.

kali_run_nmap

High-level Nmap port/service scanner wrapper.

kali_run_sqlmap

Automatic SQL injection scan wrapper.

kali_run_gobuster

Web directory & DNS brute-forcing wrapper.

kali_run_searchsploit

Search ExploitDB offline exploit database.

kali_manage_workspace

Read, write, list, or delete scan logs & target lists in workspace directory.


Security & Ethics Warning

WARNING

Penetration testing tools shouldonly be executed against targets you own or have explicit, documented permission to test. Always operate responsibly and in accordance with applicable laws.

F
license - not found
Not graded
quality - not tested
B
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    Not graded
    quality
    Not graded
    maintenance
    Enables AI assistants to execute penetration testing commands and security tools on Kali Linux remotely. Supports automated reconnaissance, vulnerability scanning, and CTF solving through integration with 25+ offensive security tools like nmap, gobuster, and nuclei.
    16
  • F
    license
    Not graded
    quality
    D
    maintenance
    Connects AI assistants to 55+ Kali Linux security tools for automated CTF solving, penetration testing, and security analysis across 7 categories including cryptography, forensics, web security, and binary exploitation.
    50
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI assistants to perform penetration testing and security assessments by exposing 60+ Kali Linux security tools including network scanning, web security testing, password cracking, exploitation frameworks, and OSINT capabilities through an AI-friendly interface.
    2
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to perform authorized penetration testing and security assessments by exposing 20+ Kali Linux security tools (nmap, sqlmap, gobuster, hydra, etc.) through a safe, validated interface with command allowlists, rate limiting, and input sanitization.
    19
    1

View all related MCP servers

Related MCP Connectors

  • Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.

  • Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

  • Runtime permission, approval, and audit layer for AI agent tool execution.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/VibeCode-cell/kali-mcp-tool'

If you have feedback or need assistance with the MCP directory API, please join our Discord server