sec-aircrack-ng-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SSH_KEY | No | Path to SSH private key file | |
| SSH_USER | No | SSH username | kali |
| KALI_HOST | No | Hostname or IP address of Kali system | kali |
| CAPTURE_DIR | No | Directory for capture files on Kali | /tmp/aircrack-captures |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| test_connectionA | Test SSH connection to Kali Linux and verify aircrack-ng is installed |
| airmon_checkA | List wireless interfaces and their status. Shows PHY, Interface, Driver, and Chipset. |
| airmon_check_killA | Kill processes that might interfere with monitor mode (NetworkManager, wpa_supplicant, etc.) |
| airmon_startA | Enable monitor mode on a wireless interface. Creates a monitor interface (e.g., wlan0mon). |
| airmon_stopA | Disable monitor mode and restore managed mode on interface |
| airodump_scanA | Scan for wireless networks. Returns list of access points with BSSID, channel, encryption, and ESSID. |
| airodump_captureB | Start capturing packets from a specific access point. Runs in background. |
| airodump_stopB | Stop a running packet capture |
| airodump_statusA | Check status of a running capture and list captured files |
| aireplay_deauthB | Send deauthentication frames to disconnect clients from AP (helps capture WPA handshake) |
| aireplay_fakeauthC | Perform fake authentication with AP (used for WEP attacks) |
| aircrack_crackB | Attempt to crack WPA/WPA2 handshake using wordlist |
| aircrack_check_handshakeA | Check if a valid WPA handshake has been captured in a pcap file |
| list_capturesA | List all capture files in the captures directory |
| cleanup_capturesB | Delete capture files from the captures directory |
| get_interface_infoC | Get detailed information about a wireless interface |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 16 tools
Each tool has a clear, distinct purpose with a unique verb-noun combination. For example, aircrack_check_handshake and aircrack_crack are different stages, and aireplay_deauth vs aireplay_fakeauth are separate attacks.
All tools follow a consistent naming pattern: tool prefix (aircrack, aireplay, etc.) followed by underscore and action. All use snake_case and descriptive verbs, making it easy to predict the function.
16 tools cover the full aircrack-ng workflow: interface setup, scanning, capture, injection, and cracking. Each tool serves a necessary role without being excessive.
The set covers the main WPA/WPA2 attack chain well, but is missing a tool for WEP cracking (aireplay_fakeauth is present but no aircrack for WEP). This is a minor gap in an otherwise thorough surface.