Runs Kali Linux penetration testing tools inside isolated Docker containers, with tools for container management, starting/stopping containers, and executing security commands in a containerized environment.
Provides comprehensive access to Kali Linux penetration testing tools including network scanning, vulnerability assessment, web application security testing, password cracking, wireless analysis, digital forensics, exploitation tools, and reverse engineering capabilities.
Provides access to Metasploit framework for exploit development and testing through the kali_exploitation tool.
Enables network packet analysis and sniffing through the kali_sniffing_spoofing tool alongside other network capture utilities.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Kali MCP Server scan my local network for open ports and services"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
A powerful MCP (Model Context Protocol) server that provides access to Kali Linux penetration testing tools through Docker containers.
🚀 20 Specialized Tools for comprehensive Kali Linux operations
🐳 Docker Integration - Runs Kali in isolated containers
🔒 Secure Execution - Commands run inside Kali container
📦 Easy Installation - Available globally via npm
🛠️ Complete Toolkit - All major Kali Linux tool categories
Related MCP server: Kali MCP Server
npm install -g kali-mcp-servergit clone <repository-url>
cd kali-mcp-server
npm install
npm startAdd this to your .kilocode/mcp.json or any MCP configuration:
{
"mcpServers": {
"kali": {
"command": "npx",
"args": ["-y", "kali-mcp-server"]
}
}
}run_kali_command - Execute any command inside Kali container
start_kali_container - Start the Kali container
stop_kali_container - Stop the Kali container
kali_container_status - Check container status
install_kali_package - Install Kali packages via apt
update_kali_system - Update Kali system packages
kali_network_scan - Network scanning (nmap, masscan)
kali_service_scan - Service scanning and enumeration
kali_information_gathering - OSINT and reconnaissance (whois, dnsrecon, theharvester)
kali_vulnerability_scan - Vulnerability scanning (nikto, dirb, gobuster)
kali_web_scan - Web app testing (sqlmap, dirb, nikto, wpscan)
kali_password_crack - Password tools (john, hashcat, hydra)
kali_wireless_tools - WiFi analysis (airodump-ng, aireplay-ng)
kali_forensics - Forensics tools (volatility, autopsy, binwalk)
kali_exploitation - Exploit development (metasploit, searchsploit)
kali_social_engineering - SE tools (setoolkit, king-phisher)
kali_reverse_engineering - Advanced RE tools (radare2, gdb, strace, ltrace, checksec, patchelf)
kali_stress_testing - DoS tools (slowloris, torshammer)
kali_sniffing_spoofing - Sniffing tools (wireshark, tcpdump, arpspoof)
run_kali_command - Execute any Kali command directly
Penetration Testing - Complete toolkit in isolated environment
Network Security - Scanning, sniffing, and spoofing tools
Web Application Security - SQL injection, directory scanning, vulnerability assessment
Wireless Security - WiFi analysis and attack tools
Digital Forensics - Memory analysis, disk forensics, evidence collection
Password Security - Hash cracking, brute force testing
Reverse Engineering - Binary analysis, debugging, disassembly, decompilation
Social Engineering - Phishing, credential harvesting tools
Vulnerability Research - Exploit development and testing
Security Training - Learn ethical hacking in safe environment
CTF Challenges - Complete toolkit for capture the flag competitions
🔐 Commands execute inside Docker container
🛡️ Isolated from host system
📝 Full audit trail of executed commands
🗑️ Automatic cleanup of containers
Docker installed and running
Node.js 16+
Internet connection (for npm packages)
# Clone and setup
git clone <repository-url>
cd kali-mcp-server
npm install
# Run locally
npm start
# Publish to npm (after npm login)
npm publish --access publicMIT License - See LICENSE file for details.
For issues and feature requests, please create an issue in the repository.
⚠️ Disclaimer: This tool is for educational and authorized penetration testing only. Ensure you have permission before scanning any networks or systems.
Install a package in Kali Linux using apt
Inputs: package (required).
Archive and compression tools
Inputs: tool (required), operation, archive, options.
Check if Kali container is running
Inputs: no named parameters.
Cryptography and encoding tools
Inputs: tool (required), operation, input, options.
CTF-specific tools for capture the flag challenges
Inputs: tool (required), file, options.
Enumeration and service detection tools
Inputs: tool (required), target (required), options.
File analysis and extraction tools
Inputs: tool (required), file (required), options.
Digital forensics tools
Inputs: tool (required), file, options.
Gather information about target (whois, dns, etc.)
Inputs: target (required), tool.
Network exploitation and post-exploitation tools
Inputs: tool (required), target, options.
Perform a network scan using Kali tools
Inputs: target (required), scan_type.
Password cracking tools
Inputs: tool (required), file, options.
Reverse engineering tools
Inputs: tool (required), file, options.
Scan for open services on target
Inputs: target (required).
Network sniffing and spoofing tools
Inputs: tool (required), interface, options.
Social engineering tools
Inputs: tool (required), options.
Stress testing tools
Inputs: tool (required), target (required), options.
Scan for vulnerabilities using Kali tools
Inputs: target (required), tool.
Web exploitation and analysis tools
Inputs: tool (required), target, options.
Web application security scanning
Inputs: target (required), tool, options.
Wireless network analysis tools
Inputs: tool (required), interface, options.
Execute a command inside the Kali Linux container
Inputs: command (required), workdir.
Start the Kali Linux container if not running
Inputs: no named parameters.
Stop the Kali Linux container
Inputs: no named parameters.
Update Kali Linux system packages
Inputs: no named parameters.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Scored across 25 tools
The tools are organized by functional categories (e.g., enumeration, web exploitation, forensics), which helps distinguish them, but there is significant overlap in purpose. For example, 'kali_network_scan' and 'kali_service_scan' both involve scanning, and 'kali_web_exploitation' and 'kali_web_scan' both target web applications, which could lead to confusion in tool selection.
Most tools follow a consistent 'kali_*' prefix with descriptive names (e.g., 'kali_forensics', 'kali_password_crack'), but there are deviations like 'install_kali_package', 'run_kali_command', 'start_kali_container', and 'update_kali_system' that use verb-first patterns, breaking the consistency. Overall, the naming is mostly predictable but not perfectly uniform.
With 25 tools, the count is high and feels heavy for the server's purpose of managing Kali Linux tools and containers. Many tools are narrowly scoped to specific tool categories, which could be consolidated or grouped, making the set overwhelming and potentially redundant for typical agent workflows.
The tool set covers a broad range of Kali Linux functionalities, including installation, updates, container management, and various security tool categories (e.g., scanning, exploitation, forensics). However, there are minor gaps, such as no explicit tool for managing tool configurations or handling logs, but core operations are well-represented for the domain.
AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.
Offline methodology engine for authorized penetration testing, CTF, and security research.
Security scanner for AI agents and MCP servers: injection, jailbreak, tool abuse.
Agent rental platform: web-vuln scanning, OSINT and red-team tools via subscription.
