kali-mcp-tool
Provides access to over 600 security, penetration testing, and forensic tools installed on Kali Linux, including arbitrary command execution, tool search, manpage retrieval, and structured wrappers for common tools like nmap, sqlmap, gobuster, and searchsploit.
Allows Metasploit to be executed as one of the Kali Linux penetration testing tools, enabling exploitation and security assessment workflows.
Allows Wireshark to be executed as one of the Kali Linux tools, enabling network traffic analysis and packet inspection.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@kali-mcp-toolScan 192.168.1.1 for open ports using nmap"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Kali Linux MCP Server & Client
A high-performance Model Context Protocol (MCP) Server and Client ecosystem running natively on Kali Linux, providing AI assistants (VSCode, Claude Desktop, Antigravity IDE) full, structured access to all 600+ installed security, penetration testing, and forensic tools.
Features
600+ Kali Tools Available: Execute any binary tool in the full Kali suite natively (Nmap, Metasploit, Sqlmap, Gobuster, Nikto, John the Ripper, Hydra, Wireshark, Searchsploit, Ghidra, etc.).
VirtualBox / Remote VM Support:
Run
server.pyinside a VirtualBox Kali VM (listening on host-only or bridged network adapter).Run
client.pyon your Windows Host insidemcp.json. It bridges local Stdio to remote Kali SSE HTTP seamlessly!
Dual Transport Architecture:
Stdio Mode: For single-machine local setup.
SSE HTTP Mode: For cross-machine or VirtualBox / VMware / WSL2 setups.
Dynamic Tool Discovery & Manpages: Automatically search installed tools by category and query manpages (
man <tool>) or--helpdocumentation on the fly.Structured Wrappers & Workspace Management: Includes high-level JSON wrappers for key tools (
nmap,sqlmap,gobuster,searchsploit) and local artifact/file management.
Related MCP server: MCP Kali Server
Installation
On Kali Linux (Server)
git clone https://github.com/your-repo/kali-mcp.git
cd kali-mcp
python3 -m pip install -r requirements.txt
python3 -m pip install -e .On Windows Host (Client)
git clone https://github.com/your-repo/kali-mcp.git
cd kali-mcp
pip install -r requirements.txt
pip install -e .Usage Scenarios
Scenario 1: VirtualBox / Remote Kali Setup (Recommended for Windows Host + Kali VM)
On VirtualBox Kali VM: Check your Kali VM host-only or bridged IP address (
ip a, e.g.192.168.56.101), then run the server:python3 server.py --host 0.0.0.0 --port 8000 # Or using the installed CLI: kali-mcp-server --host 0.0.0.0 --port 8000In VSCode / Claude Desktop / Antigravity IDE on Windows Host: Configure your
mcp.jsonfile:{ "mcpServers": { "kali-linux": { "command": "python", "args": [ "C:/path/to/kali-mcp-tool/client.py", "--server", "192.168.56.101", "--port", "8000" ] } } }Alternatively, if installed via
pip install -e ., you can use the installed CLI command directly:{ "mcpServers": { "kali-linux": { "command": "kali-mcp-client", "args": [ "--server", "192.168.56.101", "--port", "8000" ] } } }The client will bridge Stdio from your IDE directly to your VirtualBox Kali VM over SSE!
Interactive Terminal Client (Optional): You can test tools directly from a terminal prompt:
python client.py --server 192.168.56.101 --port 8000 --interactive # Or: kali-mcp-client --server 192.168.56.101 --port 8000 --interactive
Scenario 2: Local Single-Environment Setup (Running inside Kali directly)
If your IDE is running directly on Kali Linux:
{
"mcpServers": {
"kali-linux": {
"command": "python3",
"args": [
"/path/to/kali-mcp-tool/server.py"
]
}
}
}Or using the installed command:
{
"mcpServers": {
"kali-linux": {
"command": "kali-mcp-server"
}
}
}Available MCP Tools
Tool | Description |
| Execute any arbitrary shell command natively on Kali with timeout control. |
| Search installed Kali tools by name, keyword, or category. |
| Dynamically fetch manpages ( |
| High-level Nmap port/service scanner wrapper. |
| Automatic SQL injection scan wrapper. |
| Web directory & DNS brute-forcing wrapper. |
| Search ExploitDB offline exploit database. |
| Read, write, list, or delete scan logs & target lists in workspace directory. |
Security & Ethics Warning
Penetration testing tools shouldonly be executed against targets you own or have explicit, documented permission to test. Always operate responsibly and in accordance with applicable laws.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseNot gradedqualityNot gradedmaintenanceEnables AI assistants to execute penetration testing commands and security tools on Kali Linux remotely. Supports automated reconnaissance, vulnerability scanning, and CTF solving through integration with 25+ offensive security tools like nmap, gobuster, and nuclei.16
- FlicenseNot gradedqualityDmaintenanceConnects AI assistants to 55+ Kali Linux security tools for automated CTF solving, penetration testing, and security analysis across 7 categories including cryptography, forensics, web security, and binary exploitation.50
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to perform penetration testing and security assessments by exposing 60+ Kali Linux security tools including network scanning, web security testing, password cracking, exploitation frameworks, and OSINT capabilities through an AI-friendly interface.2MIT
- FlicenseAqualityDmaintenanceEnables AI assistants to perform authorized penetration testing and security assessments by exposing 20+ Kali Linux security tools (nmap, sqlmap, gobuster, hydra, etc.) through a safe, validated interface with command allowlists, rate limiting, and input sanitization.191
Related MCP Connectors
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Runtime permission, approval, and audit layer for AI agent tool execution.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/VibeCode-cell/kali-mcp-tool'
If you have feedback or need assistance with the MCP directory API, please join our Discord server