Kali MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| NMAP_PATH | No | Custom path to the nmap binary | |
| SQLMAP_PATH | No | Custom path to the sqlmap binary | |
| GOBUSTER_PATH | No | Custom path to the gobuster binary |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| kali_network_nmap_scanA | Perform network port scanning using Nmap. Nmap (Network Mapper) is a powerful network scanner for discovering hosts, services, and potential vulnerabilities. Capabilities:
Usage Notes:
Example:
|
| kali_network_nmap_discoverA | Discover live hosts on a network using Nmap. Supports ping, ARP, TCP, UDP, and ICMP discovery methods. |
| kali_network_masscan_scanB | High-speed port scanner capable of scanning the entire internet in minutes. Use with caution and proper authorization. |
| kali_network_netdiscover_scanB | ARP reconnaissance tool for discovering hosts on a local network. Supports active and passive modes. |
| kali_network_tcpdump_captureB | Capture network packets for analysis. Supports BPF filters and can save to PCAP files. |
| kali_network_tshark_captureC | Wireshark CLI for packet capture and analysis with advanced filtering and multiple output formats. |
| kali_web_gobuster_dirA | Enumerate directories and files on web servers using wordlists. Gobuster is a fast directory/file brute-forcing tool written in Go. Features:
Example:
|
| kali_web_gobuster_dnsC | Enumerate subdomains using DNS brute-forcing with wordlists. |
| kali_web_sqlmap_testA | Automated SQL injection testing and exploitation. SQLMap automates the detection and exploitation of SQL injection vulnerabilities. WARNING: Only use on systems you have authorization to test. Features:
Example:
|
| kali_web_nikto_scanC | Comprehensive web server scanner for vulnerabilities, misconfigurations, and security issues. |
| kali_web_wpscan_scanC | WordPress security scanner for finding vulnerabilities in WordPress sites, themes, and plugins. |
| kali_web_ffuf_fuzzA | Fast web fuzzer for discovering hidden files, directories, and parameters. URL must contain FUZZ keyword. |
| kali_web_nuclei_scanC | Template-based vulnerability scanner with extensive CVE coverage and custom templates support. |
| kali_password_hydra_bruteA | Fast network login brute-forcer supporting many protocols. Hydra is a parallelized login cracker which supports numerous protocols. Supported Services:
WARNING: Only use on systems you have authorization to test. Example:
|
| kali_password_john_crackC | John the Ripper password cracker supporting many hash formats and attack modes. |
| kali_password_hashcat_crackC | Advanced password recovery tool using GPU acceleration. Supports 300+ hash types. |
| kali_exploit_searchsploit_searchB | Search the Exploit Database for public exploits and vulnerability information. SearchSploit is a command-line search tool for Exploit-DB. Search Options:
Example:
|
| kali_exploit_searchsploit_examineC | Examine and display the contents of an exploit from searchsploit results. |
| kali_exploit_msfvenom_generateA | Generate custom payloads for Metasploit Framework. Msfvenom is a payload generator and encoder combining msfpayload and msfencode. WARNING: Only use generated payloads for authorized security testing. Common Payloads:
Example:
|
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 19 tools
Each tool has a clearly distinct purpose with no ambiguity. The tools are organized into categories (exploit, network, password, web) and target specific resources or actions, such as kali_network_nmap_discover for host discovery versus kali_network_nmap_scan for port scanning. There is no overlap in functionality, making it easy for an agent to select the correct tool.
All tool names follow a consistent verb_noun pattern with a uniform prefix structure (kali_category_tool_action). For example, kali_exploit_searchsploit_search and kali_web_gobuster_dir adhere to the same naming convention throughout. There are no deviations or mixed styles, ensuring predictability and readability.
With 19 tools, the server is well-scoped for its purpose of providing security testing and penetration testing utilities. Each tool earns its place by covering distinct aspects like network scanning, password cracking, and web vulnerability assessment. The count is appropriate for the domain, avoiding both thin coverage and overwhelming complexity.
The tool surface is complete with comprehensive coverage of the security testing domain. It includes tools for exploitation, network reconnaissance, password attacks, and web application scanning, with no obvious gaps. Each category has multiple tools that support full workflows, such as discovery, scanning, and exploitation, ensuring agents can handle typical tasks without dead ends.